Multiple Default Routes

worldcalltel · ‎09-27-2007

I am using a 7200 router with 4 fa port. 3 of which is connected to different ISP and 1 for my LAN. I tried to configure 3 multiple default routes 0.0.0.0 0.0.0.0 x.x.x.x for my three ISP but only one ISP can route to the internet.

interface FastEthernet1/0

description Connection-to-Digitel

ip address 202.178.172.65 255.255.255.192

duplex half

!

interface FastEthernet2/0

description Connection-to-FiberCity

ip address 201.85.18.129 255.255.255.248

duplex half

!

interface FastEthernet3/0

description Connection-to-IPLC-NY2

ip address 66.171.250.225 255.255.255.224 secondary

ip address 66.171.250.49 255.255.255.240

duplex full

interface FastEthernet4/0

ip address 192.168.111.1 255.255.255.0

no ip redirects

ip route 0.0.0.0 0.0.0.0 202.138.152.66

ip route 0.0.0.0 0.0.0.0 203.82.38.130

ip route 0.0.0.0 0.0.0.0 63.52.35.6

What do you suggests?, all i want to route a specific subnet to a specific isp. how can i achieve that.

paolo bevilacqua · ‎09-27-2007

you can to a given ISP link, only traffic originated from their addresses. You can do nat so that the inside networks are always sent out with the correct address. But you have no nat statements for net on fa4 above.

worldcalltel · ‎09-27-2007

Sorry, i pasted the wrong config.

There is a nat outside on the interface fa1/0 to fa3/0 and nat inside on the fa4/0.

For example:

line 1: ip nat inside source static 192.168.111.32 66.171.250.57

line 2: ip nat pool ZHAPA-pool 202.178.172.71 202.178.172.71 netmask 255.255.255.192

line 3: ip nat inside source route-map ZHAPA-map pool ZHAPA-pool overload

line 4: route-map ZHAPA-map permit 35

match ip address 60

line 5: access-list 60 permit 10.10.10.0 0.0.0.255

The line 1 above is not translating. While the rest of the lines are working. So, I suspect there is a conflict on the default route config. Because its not sending it to the correct outgoing interface. And i am quite confused on the routing. What do i need to do lets say all 66.171.250.224/27 and 66.171.250.48/28 would go to 63.52.35.6 only. And not use the the two other routes. I did try ip route 66.171.250.224 255.255.255.224 63.52.35.6, but still no avail.

paolo bevilacqua · ‎09-28-2007

What you want is called policy based routing, or PBR. In short, you build route-maps again an apply a policy-map to an interface so traffic is directed based on more parameters than just destination address. Search cco for the configuration guide.