routing with route-map

Answered Question
Feb 19th, 2009
User Badges:

Hi,

How can i setup route-map for this situation:

On 1841 router i have leased line link to ISP, and ISDN link for special purpose, and user on LAN. (one source to two destination)

Users must be able to access to both link at anytime.


There is picture of logical topology in attachment.



Attachment: 

Try to write your ACL like this:

access-list 100 permit ip 10.0.0.0 0.0.0.255 x.x.x.x x.x.x.x(isp net)

access-list 110 permit ip 10.0.0.0 0.0.0.255 192.168.0.0 0.0.255.255(isdn net)

And then try your nat configuration like this:

ip nat inside source list 100 interface f0/0 overload

ip nat inside source list 110 interface bri 0 overload

The point is that you should use extended ACL in specifying nat. However,there is a problem how to specify destination address in the ACLs. Anyone knows?


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4 (1 ratings)
Loading.
mlitka Thu, 02/19/2009 - 13:08
User Badges:

This sounds more like just configuring your routes correctly than the need for a route-map.


Are you running a routing protocol?

armingojak Thu, 02/19/2009 - 14:38
User Badges:

No.

I have two routes, default route and static route toward ISDN, and have two NAT/PAT, one for user who goes to ISP and the other for users who use ISDN.

When configure these NATs, link to ISP dont work. When delete static NAT/PAT toward ISDN, link to ISP work good.

I am trying something with route-maps but without success.


Will these solution might work?

If i left static default route to ISP, and make route map with which i will filter traffic that need to use ISDN,

and applying route map on inside interface.


Thanks

Correct Answer

Try to write your ACL like this:

access-list 100 permit ip 10.0.0.0 0.0.0.255 x.x.x.x x.x.x.x(isp net)

access-list 110 permit ip 10.0.0.0 0.0.0.255 192.168.0.0 0.0.255.255(isdn net)

And then try your nat configuration like this:

ip nat inside source list 100 interface f0/0 overload

ip nat inside source list 110 interface bri 0 overload

The point is that you should use extended ACL in specifying nat. However,there is a problem how to specify destination address in the ACLs. Anyone knows?


armingojak Fri, 02/20/2009 - 01:23
User Badges:

Thanks

I solved the problem with route-map and access-list...


BR

Actions

This Discussion