06-11-2008 03:41 AM - edited 03-05-2019 11:33 PM
I initially set up a network on native vlan and ADSL Router 1.
The users are connected to a Cisco Router 1841 which has all the routes configured and a default route of 0.0.0.0 0.0.0.0 'ADSL Router1 IP Address'
Now I have set up a second VLAN and have an ADSL Router 2.
Intervlan routing still configured on the Cisco 1841.
a) How to configure such that VLAN2 users only access ADSL2 for internet access? and Native VLAN on ADSL1
b) What about the default route? Should it be removed?
Thanks
06-11-2008 05:09 AM
Its been a bit difficlt for me to visulze it.
1841 router-1 connected to ---> ?---- Users
Is there a device in between ?
What ip address are the useres getting public/ private ?
ADSL Router2 connted to ---> ? -- Users ?
are the both routers interconnected and if yes how ?
The simple methothd which this can work would by configuring a dhcp pool for vlan 2 users on ADSL2.
Still if there can be a possible network diagram would help and basic config information.
regards,
Pravin
06-11-2008 05:24 AM
You can do this by having two route map on the 1841 router where Vlan and routing is configured. One route map should matach the Vlan 1 and set next hop to ADSL Router 1 and second should match traffic from Vlan2 and next hop pointing to ADSL Router 2. In this way you can achieve this.
If you want to have redundency then you can also configure that with this option.
06-11-2008 09:00 AM
06-13-2008 03:31 AM
Any other suggestions please?
06-13-2008 03:59 AM
Can you copy and paste the current configuration on your router.
What I suggested earlier is still possible with your design.
Are you able to ping ADSL router 2 from your router after removing the default route.
06-13-2008 04:41 AM
Hi,
As per the deisign there is a soluting not with route but with switching.
You may need to change the subnet for the same:
--On the switch.
Native Vlan 1.
ip address 192.168.1.x
Create Vlan 10 in place of 1 and 20 in place of 2
Configure the Switch port Connected to the routers as:
switchport trunk encapsulation dot1q
switchport mode trunk
--On router 1841
The interface connected to the switch
interface FastEthernet -/-
no ip address
duplex auto
speed auto
confgure 2 subinterface
interface FastEthernet-/-.10
encapsulation dot1Q 10
ip address 192.168.1.x 255.255.255.0
!
interface FastEthernet-/-.20
encapsulation dot1Q 20
ip address 192.168.2.x 255.255.255.0
Create 2 dhcp pool for vlan10 with network id 1.x and vlan 20 with network id 2.x
You will have to assaign the rest swith ports to vlan 10 and 20.
Native vlan would be diffrent and the two vlans will get diffrent ip address and will be routed through diffrent adsl.
Hope this helps.
Regards,
Pravin
06-23-2008 11:01 PM
Hi Parvin,
I was going through the setup and was wondering how would the default routes to the adsl routers be configured for each of the VLAN?
Scenario:-
I try to access www.cisco.com from a PC in VLAN 10. PC IP: 192.168.10.5; GW: 192.168.10.1 (1841 Router); DNS: 192.168.10.2 (ADSL Router)
How will 1841 know that it should forward this traffic to ADSL Router in VLAN 10.
Similarly if the above was in VLAN 20.
thx
06-24-2008 12:43 AM
HI
I think you can do this with PBR.
HPH
Bhargav
06-24-2008 10:56 PM
thx
some help with PBR for these 2 VLANs and default route will be much appreciated
06-25-2008 04:38 AM
hi
you can find the detail for PBR in the below link. I think the Example is best fit to your senario. What you thought of that ???
http://www.cisco.com/en/US/docs/ios/12_0/qos/configuration/guide/qcpolicy.html
HPH
Bhargav
06-25-2008 09:56 PM
Thanks indeed the example is close to what i am looking for.
However I have now complicated the diagram a bit. I have added a third path to the equation which is common to both VLANS. (Some applications are hosted there).
Will the following config ensure all the vlan traffic are sent to its ADSL router and ensure that applications on network 192.168.10.x are accessible to both through router 192.168.10.1?
Access-list 1 permit ip 192.168.1.0 0.0.0.255
Access-list 2 permit ip 192.168.2.0 0.0.0.255
Access-list 100 deny ip any 192.168.10.0 0.0.0.255
interface fastethernet 0/1
ip policy route-map ADSL
!
route-map ADSL permit 10
match ip address 100
match ip address 1
set ip next-hop 192.168.1.2
!
route-map ADSL permit 20
match ip address 100
match ip address 2
set ip next-hop 192.168.2.2
ip route 0.0.0.0 0.0.0.0 192.168.10.1
06-26-2008 04:44 AM
I think you want to access the 192.16.10.0 network.
you can use specific route for it.
ip route 192.16.10.0 255.255.255.0 192.168.10.1
HPH
Bhargav
06-26-2008 08:17 AM
Do you mean
1) I dont need the deny access list?
2) Wont the route map ignore the static route you specified?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide