09-27-2007 02:12 PM - edited 03-03-2019 06:56 PM
I am using a 7200 router with 4 fa port. 3 of which is connected to different ISP and 1 for my LAN. I tried to configure 3 multiple default routes 0.0.0.0 0.0.0.0 x.x.x.x for my three ISP but only one ISP can route to the internet.
interface FastEthernet1/0
description Connection-to-Digitel
ip address 202.178.172.65 255.255.255.192
duplex half
!
interface FastEthernet2/0
description Connection-to-FiberCity
ip address 201.85.18.129 255.255.255.248
duplex half
!
interface FastEthernet3/0
description Connection-to-IPLC-NY2
ip address 66.171.250.225 255.255.255.224 secondary
ip address 66.171.250.49 255.255.255.240
duplex full
interface FastEthernet4/0
ip address 192.168.111.1 255.255.255.0
no ip redirects
ip route 0.0.0.0 0.0.0.0 202.138.152.66
ip route 0.0.0.0 0.0.0.0 203.82.38.130
ip route 0.0.0.0 0.0.0.0 63.52.35.6
What do you suggests?, all i want to route a specific subnet to a specific isp. how can i achieve that.
09-27-2007 02:21 PM
you can to a given ISP link, only traffic originated from their addresses. You can do nat so that the inside networks are always sent out with the correct address. But you have no nat statements for net on fa4 above.
09-27-2007 03:54 PM
Sorry, i pasted the wrong config.
There is a nat outside on the interface fa1/0 to fa3/0 and nat inside on the fa4/0.
For example:
line 1: ip nat inside source static 192.168.111.32 66.171.250.57
line 2: ip nat pool ZHAPA-pool 202.178.172.71 202.178.172.71 netmask 255.255.255.192
line 3: ip nat inside source route-map ZHAPA-map pool ZHAPA-pool overload
line 4: route-map ZHAPA-map permit 35
match ip address 60
line 5: access-list 60 permit 10.10.10.0 0.0.0.255
The line 1 above is not translating. While the rest of the lines are working. So, I suspect there is a conflict on the default route config. Because its not sending it to the correct outgoing interface. And i am quite confused on the routing. What do i need to do lets say all 66.171.250.224/27 and 66.171.250.48/28 would go to 63.52.35.6 only. And not use the the two other routes. I did try ip route 66.171.250.224 255.255.255.224 63.52.35.6, but still no avail.
09-28-2007 03:02 AM
What you want is called policy based routing, or PBR. In short, you build route-maps again an apply a policy-map to an interface so traffic is directed based on more parameters than just destination address. Search cco for the configuration guide.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide