05-25-2007 05:37 AM - edited 03-03-2019 05:08 PM
Hello
I have 2 cisco 876 , 2 isp one windows 2003 server as the gateway to the internet. I have 16 real ip for each ISP.
I want to configure the PBR to route smtp to ISP 1 and the www, pptp to isp 2.
It is possible that.. I Read some documents that with pbr i can do that
Thanks
05-26-2007 08:43 AM
Yes, it's definitely possible.
05-26-2007 11:22 AM
Hi,
Yes go ahead, and please do not hesitate for any further questions:
Policy-Based Routing
http://www.cisco.com/warp/public/732/Tech/plicy_wp.htm
Configuring Policy-Based Routing
http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fqos_c/fqcprt1/qcfpbr.htm
HTH, please do rate all helpful replies,
Mohammed Mahmoud.
05-28-2007 02:39 AM
OK i will try and i will tell you the results
Thanks
05-28-2007 06:43 AM
Hi,
It's possible , however your smtp server then have to be configured with an ip from isp 1 ,and server traffic to isp 2 must come from a server configured with an ip in the scope "owned" by isp 2..
For servers that do not need to be reached initiating communication from Internet,
you just have to set up NAT overloading.
BR,
Bjornarsb
05-29-2007 02:48 AM
I do the following config on the first cisco
But seems something going wrong
sho run
Building configuration...
Current configuration : 4934 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname yourname
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 warnings
!
no aaa new-model
!
resource policy
!
ip cef
!
!
no ip domain lookup
ip domain name yourdomain.com
!
!
!
!
!
!
interface BRI0
no ip address
encapsulation hdlc
shutdown
!
interface ATM0
no ip address
no atm ilmi-keepalive
dsl operating-mode auto
!
interface ATM0.1 point-to-point
no snmp trap link-status
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
switchport access vlan 2
!
interface Dot11Radio0
no ip address
shutdown
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
station-role root
!
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$
ip address 62.xxx.38.17 255.255.255.240
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1452
!
interface Vlan2
ip address 194.xxx.21.45 255.255.255.240
ip nat outside
ip virtual-reassembly
ip policy route-map forthnet
!
interface Dialer0
ip address negotiated
ip virtual-reassembly
encapsulation ppp
ip policy route-map otenet
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap pap callin
ppp chap hostname megadis@otenet.gr
ppp chap password 0 megadis1
ppp pap sent-username megadis@otenet.gr password 0 megadis1
!
ip route 0.0.0.0 0.0.0.0 Dialer0
ip route 0.0.0.0 0.0.0.0 194.xxx.21.33
!
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 5 life 86400 requests 10000
ip nat inside source route-map forthnet interface Vlan2 overload
!
access-list 101 permit tcp any eq smtp any
access-list 102 permit tcp any eq www any
dialer-list 1 protocol ip permit
no cdp run
!
!
route-map otenet permit 10
match ip address 101
set interface Dialer0
!
route-map forthnet permit 10
match ip address 102
set ip next-hop 194.xxx.21.33
!
!
the second router is conected on port fa03 of the main and do routing with real ip from the second provider
05-29-2007 02:56 AM
Hi !
Nice going , you just need to change:
access-list 102 permit tcp any eq www any
to
access-list 102 permit tcp any any eq www
BR,
Bjornarsb
05-29-2007 03:46 AM
I do it
But i see that the www does not work
I do nat in the direction vlan2 because i have real ip from the two ISP ..
05-29-2007 04:36 AM
Hi,
If vlan1 is ISP 1 and vlan2 is ISP 2 it should work.
You should not use same adm distance for your default gateways:
!
ip route 0.0.0.0 0.0.0.0 Dialer0
ip route 0.0.0.0 0.0.0.0 194.xxx.21.33
!
Use
!
ip route 0.0.0.0 0.0.0.0 Dialer0
ip route 0.0.0.0 0.0.0.0 194.xxx.21.33 222
!
Post a sh ip nat translations.
BR,
Bjornarsb
05-29-2007 05:33 AM
i fix the roure
but the same all the trafic do to dialer 0
in the sh ip nat translation
i did not see any thing is blank
the sh ip nat stat.. is
yourname#sho ip nat statistics
Total active translations: 0 (0 static, 0 dynamic; 0 extended)
Outside interfaces:
Vlan2
Inside interfaces:
Vlan1
Hits: 38 Misses: 0
CEF Translated packets: 11, CEF Punted packets: 0
Expired translations: 9
Dynamic mappings:
-- Inside Source
[Id: 2] route-map forthnet interface Vlan2 refcount 0
Queued Packets: 0
06-04-2007 05:31 AM
Have any one any ideal about this ?
Thanks
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide