Routing from Vlans

[mburguk1000]

We are going to use our 4507 switch as our default gateway. we are plaaning to implement vlans for workstations.

What i want to achieve is route internet traffic to two independent ISPs from each vlan.

Please could someone point me in the right for documentation to achieve this

Many Thanks

[amit-singh]

Hi,

How many vlan you have in your network.

Which supervisor engine you have? Please paste " show module". Do you intent to run BGP.

You can use Policy base routing to achieve the same.

http://www.cisco.com/univercd/cc/td/doc/product/lan/cat4000/12_2_31a/config/pbroute.htm

HTH, Please rate if it does.

-amit singh

[mburguk1000]

I have attached a show module as requested.

Looking at the output i see an entry for faulty please can you explain what this means.

Also we are not planning to use BGP

Thanks

[spremkumar]

Hi Mark

AFAIK you can mark the traffic based on the interface from which its coming out from.

Once you have that in place you can route the traffic accordingly using next hop or interface using route map.

By doing so the traffic orginating from particular vlan can be routed across the desired interface.

If this doesnt solve your problem do post out about your current setup..

regds

[amit-singh]

Hi,

You are running Sup 4 on it and if you are not running BGP then you have to use Policy based routing as posted earlier.

I checked that module is listed as faulty which means that its a hardware problem. Was this module working before?

Please run diagnostics for this module and attach its output. It will list about its failures. Command " Show diag module "

HTH, Please rate if it does.

-amit singh

[mburguk1000]

I have attached the output

[amit-singh]

It looks like strange to me. The diagnostic test says that the module is OK. While the show module says it is faulty. Is this module working? if yes, then please try re-inserting the module and it should take care of the issue.Update on this, if that doesnot work.

-amit singh

[rvv]

if you interest i have conf to route

traffic to two independent ISP. One ISP is primary, and another backup.

In case of fail one traffic routed to another.

I'am use PBR and NAT.

BGP not used.

[mburguk1000]

Yes that would be very much of interest

[kamal-learn]

hi

the use of route map can help you achieve your goal using both links to both ISPs, and since you are using two differents ISP, with BGP is good to go, so you can send traffic to the desired ISP according to your policy, but the returning traffic you can not predict the ISP from which it takes its path back easily with a simple config of BGP.instead you have to manipulate some BGP's attributes to help you in someway predict that behavior.

HTH

[rvv]

this conf for router,but i think you can adapt it to catalyst:

interface FastEthernet0/0

description LAN

!Provider1 ip pool

ip address 195.151.228.65 255.255.255.224 secondary

!Provider2 ip pool

ip address 213.234.225.201 255.255.255.240

ip nat inside

ip policy route-map internet

interface FastEthernet0/1

description Provider1

ip address 195.14.55.126 255.255.255.252

interface Serial0/0

description Provider2

ip address 195.151.250.105 255.255.255.252

ip nat outside

access-list 5 permit 195.151.228.64 0.0.0.31

access-list 6 permit 213.234.225.192 0.0.0.15

ip nat pool Provider2Pool 195.151.228.83 195.151.228.83 netmask 255.255.255.224

ip nat inside source route-map Provider2NAT pool Provider2Pool overload

route-map internet permit 20

match ip address 5

set ip next-hop 195.151.250.106 195.14.55.125

!

route-map internet permit 30

match ip address 6

set ip next-hop 195.14.55.125 195.151.250.106

!

route-map Provider2NAT permit 20

match ip address 6

!

Traafic routed thru Provider1(interface Serial0/0), in case if Provider1 fail,

traffic go tru nat pool Provider2Pool thru interface FastEthernet0/1.

Trick is to use set ip next-hop ipaddress1 ipaddress2.

This mean if interface with adjacent ipaddress1 fail (for example int fa0/1 will down)

traffic go thru ipaddress2 and will be nated.