HI ...
I have configured 1941-sec router for my client 3 months back for Autofailover and Load balance. it worked well. but from past 20days .. auto failover is working .. one the 1st ISP cable physically disconnects.. and not able to access the device from remotely thorugh 1st ISP... here i am adding the configuration ...
XXX.YYY.ZZZ,,, is primary ISP
XXX.XXX.XXX....secondary ISP
thanks in advance
RSJ
#sh run
boot-start-marker
boot-end-marker
!
!
enable password <removed>
!
no aaa new-model
!
ip cef
!
ip dhcp excluded-address 192.168.1.151
ip dhcp excluded-address 192.168.1.1
!
ip dhcp pool satwic
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 8.8.8.8 4.4.4.4 XXX.YYY.190.180 XXX.XXX.244.3
!
!
!
ip name-server 8.8.8.8
ip name-server 4.4.4.4
no ipv6 cef
!
multilink bundle-name authenticated
!
!
crypto pki trustpoint TP-self-signed-3334084634
license udi pid CISCO1941/K9 sn ABCDEF123456
!
username <REMOVED> privilege 15 password 0 <REMOVED>
!
redundancy
!
track 1 ip sla 1 reachability
delay down 9 up 10
!
track 2 ip sla 2 reachability
delay down 9 up 10
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
ip address XXX.YYY.ZZZ.74 255.255.255.252
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
interface GigabitEthernet0/1
ip address 192.168.1.1 255.255.255.0
ip flow ingress
ip nat inside
ip virtual-reassembly in
duplex auto
speed auto
!
interface FastEthernet0/1/0
ip address XXX.XXX.XXX.114 255.255.255.224
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
ip forward-protocol nd
!
ip http server
ip http authentication local
ip http secure-server
ip flow-top-talkers
top 20
sort-by bytes
!
ip nat inside source route-map isp1 interface GigabitEthernet0/0 overload
ip nat inside source route-map isp2 interface FastEthernet0/1/0 overload
ip nat inside source static 192.168.1.100 XXX.YYY.ZZZ.96
ip route 0.0.0.0 0.0.0.0 XXX.YYY.ZZZ.73 track 1
ip route 0.0.0.0 0.0.0.0 XXX.XXX.XXX.97 track 2
ip route 0.0.0.0 0.0.0.0 XXX.YYY.ZZZ.73
ip route 0.0.0.0 0.0.0.0 XXX.XXX.XXX.97
!
ip sla auto discovery
ip sla 1
icmp-echo XXX.YYY.ZZZ.73 source-interface GigabitEthernet0/0
frequency 5000
threshold 2
ip sla schedule 1 life forever start-time now
ip sla 2
icmp-echo XXX.XXX.XXX.97 source-interface FastEthernet0/1/0
frequency 5000
threshold 2
ip sla schedule 2 life forever start-time now
access-list 100 permit ip 192.168.1.0 0.0.0.255 any
!
route-map isp2 permit 10
match ip address 100
match interface FastEthernet0/1/0
!
route-map isp1 permit 10
match ip address 100
match interface GigabitEthernet0/0
!
!
snmp-server ifindex persist
snmp-server enable traps entity-sensor threshold
!
control-plane
!
!
!
line con 0
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password <REMOVED>
login
transport input all
!
scheduler allocate 20000 1000
!
end
