策略路由配置.docx

Cisco ASA Series Firewall 策略路由配置
First, we need to configure interfaces.
ciscoasa(config)# interface GigabiCisco ASA Series Firewall 策略路由配置
First, we need to configure interfaces.
ciscoasa(config)# interface GigabitEthernet0/0
ciscoasa(config-if)# no shutdown
ciscoasa(config-if)# nameif inside
ciscoasa(config-if)# ip
ciscoasa(config)# interface GigabitEthernet0/1
ciscoasa(config-if)# no shutdown
ciscoasa(config-if)# nameif outside-1
ciscoasa(config-if)# ip
ciscoasa(config)# interface GigabitEthernet0/2
ciscoasa(config-if)# no shutdown
ciscoasa(config-if)# nameif outside-2
ciscoasa(config-if)# ip
Then, we need to configure an access-list for matching the traffic.
ciscoasa(config)# access-list acl-1 permit ip
ciscoasa(config)# access-list acl-2 permit ip
We need to configure a route-map by specifying the above access-list as match criteria along with the required set actions.
ciscoasa(config)# route-map equal-access permit 10
ciscoasa(config-route-map)# match ip address acl-1
ciscoasa(config-route-map)# set ip
ciscoasa(config)# route-map equal-access permit 20
ciscoasa(config-route-map)#