Routes with source and destination

[24]

Guys

I need to setup some of my users to route out to the internet through a different firewall to the rest of our machines, so I need to have source:172.21.10.5 dest:0.0.0.0 gateway: 172.21.0.222 with all other pcs going out 172.31.0.221. now I managed to do this using a route map policy next hop command with an access list. this is ok but I also need it to know if I want to go to 172.16.0.0 to go out via the 172.31.0.221. I thought i could put in another ACL and a route command but this didnt work, can u only have 1 route map policy next hop?

 

[IPEngineer]

Ever thought of using your DHCP server to assign a different default gateway to each of the PC subnets

Just an idea......

 

[lgarner]

No, you can have multiple entries in the ACL. I have one like this:

access-list 105 permit ip host x.x.x.52 any
access-list 105 permit ip host x.x.x.56 any
route-map dyn-out permit 10
match ip address 105
set ip next-hop x.x.x.3

Try "sh access-list" to check for matches against it, and "sh route-map" to make sure it's ok