Dear Support Team,
I have a 1941 router configured for Policy based routing with two ISPs.
Two static default routes configured to point the gateways of respoective ISPs with same metric.
But the problem is, packets are going throug the one ISP only while doing traceroute.
N/W connectivity:
ISP1-----> <----------------------> LAN1
| Router |
ISP-------> <----------------------> LAN 2
Below is my configuration :
Current configuration : 5958 bytes
!
! Last configuration change at 05:18:56 UTC Mon Jun 25 2012
!
version 15.0
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname GMRIT-WAN-GATEWAY
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 warnings
enable secret 5 $1$k/Kw$pS1VX17m0hwtKWNxUkBtW0
enable password XXXXX
!
no aaa new-model
!
no ipv6 cef
no ip source-route
ip cef
!
!
!
!
ip domain name yourdomain.com
ip name-server 8.8.8.8
ip name-server 8.4.4.4
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
interface GigabitEthernet0/0
description GMRIT-VSNL-ISP-Connection
ip address 111.93.14.250 255.255.255.252
ip policy route-map VSNL-1
duplex auto
speed auto
!
interface GigabitEthernet0/1
description GMRIT-BSNL-ISP-CONNECTION
ip address 172.24.9.149 255.255.255.252
ip policy route-map BSNL-1
duplex auto
speed auto
!
interface FastEthernet0/0/0
!
interface FastEthernet0/0/1
!
interface FastEthernet0/0/2
switchport access vlan 2
!
interface FastEthernet0/0/3
!
interface Vlan1
ip address 111.93.20.154 255.255.255.248
ip policy route-map VSNL
!
interface Vlan2
ip address 117.239.50.209 255.255.255.248
ip policy route-map BSNL
!
ip forward-protocol nd
!
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
ip route 0.0.0.0 0.0.0.0 111.93.14.249
ip route 0.0.0.0 0.0.0.0 172.24.9.150
!
access-list 110 permit ip 111.93.20.152 0.0.0.7 any log
access-list 111 permit ip 117.239.50.208 0.0.0.7 any log
access-list 112 permit ip any 111.93.20.152 0.0.0.7 log
access-list 113 permit ip any 117.239.50.208 0.0.0.7 log
!
route-map VSNL permit 10
match ip address 110
set default interface GigabitEthernet0/0
!
route-map BSNL-1 permit 5
match ip address 111
set ip default next-hop 172.24.9.150
!
route-map BSNL-1 permit 10
match ip address 113
set default interface Vlan2
!
route-map BSNL permit 10
match ip address 111
set default interface GigabitEthernet0/1
!
route-map VSNL-1 permit 5
match ip address 110
set ip default next-hop 111.93.14.249
!
route-map VSNL-1 permit 10
match ip address 112
set default interface Vlan1
!
!
!
control-plane
!
banner exec ^C
% Password expiration warning.
-----------------------------------------------------------------------
Cisco Configuration Professional (Cisco CP) is installed on this device
and it provides the default username "cisco" for one-time use. If you have
already used the username "cisco" to login to the router and your IOS image
supports the "one-time" user option, then this username has already expired.
You will not be able to login to the router with this username after you exit
this session.
It is strongly suggested that you create a new username with a privilege level
of 15 using the following command.
username <myuser> privilege 15 secret 0 <mypassword>
Replace <myuser> and <mypassword> with the username and password you want to
use.
-----------------------------------------------------------------------
^C
banner login ^C
-----------------------------------------------------------------------
Cisco Configuration Professional (Cisco CP) is installed on this device.
This feature requires the one-time use of the username "cisco" with the
password "cisco". These default credentials have a privilege level of 15.
YOU MUST USE CISCO CP or the CISCO IOS CLI TO CHANGE THESE PUBLICLY-KNOWN
CREDENTIALS
Here are the Cisco IOS commands.
username <myuser> privilege 15 secret 0 <mypassword>
no username cisco
Replace <myuser> and <mypassword> with the username and password you want
to use.
IF YOU DO NOT CHANGE THE PUBLICLY-KNOWN CREDENTIALS, YOU WILL NOT BE ABLE
TO LOG INTO THE DEVICE AGAIN AFTER YOU HAVE LOGGED OFF.
For more information about Cisco CP please follow the instructions in the
QUICK START GUIDE for your router or go to http://www.cisco.com/go/ciscocp
-----------------------------------------------------------------------
^C
!
line con 0
login local
line aux 0
line vty 0 4
exec-timeout 0 0
privilege level 15
password gmrit@123
login
transport input none
line vty 5 15
exec-timeout 0 0
privilege level 15
password gmrit@123
login
transport input telnet ssh
!
scheduler allocate 20000 1000
end
GMRIT-WAN-GATEWAY#
GMRIT-WAN-GATEWAY#sh route-map
route-map VSNL, permit, sequence 10
Match clauses:
ip address (access-lists): 110
Set clauses:
default interface GigabitEthernet0/0
Policy routing matches: 1720296 packets, 207823775 bytes
route-map BSNL-1, permit, sequence 5
Match clauses:
ip address (access-lists): 111
Set clauses:
ip default next-hop 172.24.9.150
Policy routing matches: 790 packets, 1103956 bytes
route-map BSNL-1, permit, sequence 10
Match clauses:
ip address (access-lists): 113
Set clauses:
default interface Vlan2
Policy routing matches: 615 packets, 39086 bytes
route-map BSNL, permit, sequence 10
Match clauses:
ip address (access-lists): 111
Set clauses:
default interface GigabitEthernet0/1
Policy routing matches: 9583 packets, 914281 bytes
route-map VSNL-1, permit, sequence 5
Match clauses:
ip address (access-lists): 110
Set clauses:
ip default next-hop 111.93.14.249
Policy routing matches: 1724 packets, 1104143 bytes
route-map VSNL-1, permit, sequence 10
Match clauses:
ip address (access-lists): 112
Set clauses:
default interface Vlan1
Policy routing matches: 2294332 packets, 1914372311 bytes
GMRIT-WAN-GATEWAY#
Please help me to solve this issue.
Cheers,
Janardhan
