I have several groups that are all serviced by one core switch 670 with core license. I need a way to make routing and next hop decisions based on source subnet.
I want group 1 to go out firewall 1 and group 2 to go to firewall 2. I need local traffic to be routed on the core. I do not want to forward all traffic to firewalls for routing decisions. What would be the best way? Clients seem to ping fw but not get to internet.
Here is how I am doing it now.
show policy "lb-redir_gov"Policies at Policy Server:
Policy: lb-redir_gov
entry route_local_traffic {
if match all {
destination-address 192.168.0.0/16 ;
}
then {
permit ;
}
}
entry redirect_gov {
if match all {
source-address 192.168.0.0/16 ;
}
then {
redirect 10.0.5.10 ;
}
}
Number of clients bound to policy: 1
Client: acl bound once