Policy Based Routing

I have two networks built at one of my remote offices. 10.80.33.0/24 is on my MPLS link to corporate. 192.168.100.0/24 goes out a local T1 for internet access. I want to route all web traffic (port 80) from the 10.80.33.0 network out over the T1 on the 192.168.100.0/24 network. there is an ISA proxy on the 192 network between the internet router and the 192 network.
dtadminAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

dtadminAuthor Commented:
I have attached a diagram of the network involved with this posting.
network.JPG
0
lrmooreCommented:
Will the ISA Proxy allow the 10.80.33.x network to bypass it for www access? If not, simply set the proxy settings on any hosts on the 10.80.33.0 network
A route-map can easily forward the traffic, but not if the ISA won't allow it through, and I assume from your diagram that it is also doing NAT, so it has to be configured to nat the 10.80.33.0 network, needs a route to the 10.80.33.0 network pointing to 192.168.100.2

I can help with the route-map, but not the ISA config

access-list 121 permit tcp 10.80.33.0 0.0.0.255 any eq www
route-map WWW permit 10
 match ip address 121
 set ip next-hop 192.168.100.1
interface fe0/0.1
 ip policy route-map WWW

0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
dtadminAuthor Commented:
are you assuming the ISA box is 192.168.100.1 in the config above?
0
lrmooreCommented:
I was assuming that the ISA is the default gateway for the 192.168.100.x network, and that its network IP is 192.168.100.1... substitute appropriately to fit your layout.

Thanks!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Routers

From novice to tech pro — start learning today.