Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

Professional Opinions
Ask a Question
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

troubleshooting Question

Policy Based Routing PBR - Pro Curve 5412zl - asa 5550 - alternatives?

Avatar of TheBurningRom
TheBurningRom asked on
RoutersHardware FirewallsSwitches / Hubs
19 Comments1 Solution3003 ViewsLast Modified:
We are looking to split our network traffic between two ISPs. Right now we have all of our network traffic (9 VLANs) running into our core (pro curve 5412zl). From there it is routed through a standard 10/100 interface into a Packeteer 3500 Packet Shaper. From there it runs through an PIX515 in routing mode (to be upgraded to an ASA 5550 tomorrow), then through an ISP owned/managed catalyst 2950, another ISP owned/managed catalyst, and then out of the building.

What we would like to do is split off VLAN4 traffic at the core and route it around the packet shaper, into the ASA on a separate interface than the rest of the network traffic, and then OUT an interface that would be connected to the business class cable service that we would be adding to the mix, while keeping the rest of the traffic on it's usual route through our packet shaper and out the AT&T interface on the PIX/ASA.

We understand that PBR is the easiest way to do this, but we also understand that the 5412zl doesn't have this functionality. What we would like to know is, can we work around this in any way?  Maybe with an extended access list that only allows access to the "cable ISP" port on the ASA? I've seen a solution involving adding an intermediary router that does PBR to the mix as the solution...is that the only one? Does the catalyst 2600 support PBR? We happen to have one of those doing nothing right now. If not, what model would work for us? And what would the cabling setup look like?

Thank you in advance for any info. Let me know if you need to see configs or need any further details. Thanks again!
Avatar of Boilermaker85
Boilermaker85Flag of United States of America image

Our community of experts have been thoroughly vetted for their expertise and industry experience.

This problem has been solved!
Unlock 1 Answer and 19 Comments.
See Answers