Solved: Re: hi need help for failover

satishsingh_24 · ‎04-13-2010

can any one help me.

> We have designed solution using Cisco router, where customer

> > > > > have

> > taken

> > > > > internet link from isp and terminated the same on fasthernet 1

> > > > > and

> LAN

> > > is

> > > > > connected is to fastethernet 0.

> > > > > And he have taken ADSL link also and terminated it on another

> > > > > ADSL

> > > router

> > > > > and LAN he connected to same switch and kept the LAN ip

> > > > > address on

> > ADSL

> > > > same

> > > > > as Cisco router LAN ip address.

> > > > > why he have this because ,he want when primary link goes down

> > > > > then

> > > traffic

> > > > > has to shift to ADSL link ,it happening also ,but when primary

> > > > > link

> > come

> > > > up

> > > > > ,it does not move to primary link ,still the traffic used to

> > > > > route

> > > through

> > > > > ADSL link and once we used to enable or disable the LAN card

> > > > > then it

> > > move

> > > > > the traffic through primary .

> > > > >

> > > > > Please refer the document and suggest me the same.

> > > > >

Rick Morris · ‎04-13-2010

Here you have a couple of ways to set this up.

You can use HSRP or if your router is capable GLBP.

You could also use static routing with a higher AD on the secondary link.

View solution in original post

Rick Morris · ‎04-13-2010

Here you have a couple of ways to set this up.

You can use HSRP or if your router is capable GLBP.

You could also use static routing with a higher AD on the secondary link.

satishsingh_24 · ‎04-13-2010

please check then document and as failover is working ,but recovergance is not happening .

mean router is able to shift from primary to secondary ,but not able to shift again secondary to primary.

Rick Morris · ‎04-13-2010

The config you have states router, what is on the switch?

Is this a layer 3 switch? If you want failover to work you need the routing on the switch to direct the traffic.

My suggestion still would be to use HSRP and make sure you add preempt so the main router will take back over once the main line restores.

Here is a link to HSRP configs.

http://www.networkstraining.com/cisco-router-hsrp-configuration/

shailesh.h · ‎04-14-2010

I checked the attached document and providing very correct information. Only information

it missing is that whether ADSL router is maintained by you or maintained by Service provider.

By looking at the scenario HSRP with preempting enable appears to be simplistic proven option.. even HSRP advance feature like interface / IP tracking provdies IP tracking also..

This will help you to configure the expected result..

Hope this helps you..

cheers!

Shailesh

satishsingh_24 · ‎04-14-2010

adsl will going to maintain by isp and it have only static route configured on it pointing toward wan .

if you have any configuration sample available with you ,please share the same

shailesh.h · ‎04-14-2010

I am giving one of sample configuration

ip sla monitor 1

type echo protocol ipIcmpEcho 10.10.10.1

ip sla monitor schedule 1 life forever start-time now

track 1 rtr 1 reachability

ip route 10.10.10.0 255.255.255.0 (isp1-ip) track 1

ip route 10.10.10.0 255.255.255.0 (isp2-ip) 250

With regards,

Shailesh Hardas

satishsingh_24 · ‎04-15-2010

tried all thing ,but it does not working ,the same thing is working on another router

below is detail of configuration

sh ver

Router#sh version

Cisco IOS Software, 1841 Software (C1841-SPSERVICESK9-M), Version 12.4(7c), RELEASE SOFTWARE (fc2)

Technical Support: http://www.cisco.com/techsupport

Compiled Mon 18-Sep-06 19:29 by alnguyen

ROM: System Bootstrap, Version 12.3(8r)T9, RELEASE SOFTWARE (fc1)

Router uptime is 25 minutes

System returned to ROM by reload at 13:53:29 UTC Thu Apr 15 2010

System image file is "flash:c1841-spservicesk9-mz.124-7c.bin"

This product contains cryptographic features and is subject to United

States and local country laws governing import, export, transfer and

use. Delivery of Cisco cryptographic products does not imply

third-party authority to import, export, distribute or use encryption.

Importers, exporters, distributors and users are responsible for

compliance with U.S. and local country laws. By using this product you

agree to comply with applicable laws and regulations. If you are unable

to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:

--More-- http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to

export@cisco.com.

Cisco 1841 (revision 6.0) with 117760K/13312K bytes of memory.

Processor board ID FHK105112MG

2 FastEthernet interfaces

DRAM configuration is 64 bits wide with parity disabled.

191K bytes of NVRAM.

31360K bytes of ATA CompactFlash (Read/Write)

Configuration register is 0x2102

Router#sh run

Router#sh running-config

Building configuration...

Current configuration : 841 bytes

!

version 12.4

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname Router

!

boot-start-marker

boot-end-marker

!

no aaa new-model

!

resource policy

!

ip cef

!

--More-- ip sla monitor 1

type echo protocol ipIcmpEcho 192.168.2.2

timeout 1000

threshold 2

frequency 3

ip sla monitor schedule 1 life forever start-time now

!

track 1 rtr 1 reachability

!

interface FastEthernet0/0

ip address 192.168.2.1 255.255.255.252

duplex auto

speed auto

!

interface FastEthernet0/1

ip address 10.1.1.5 255.255.255.240

duplex auto

speed auto

!

--More-- ip route 0.0.0.0 0.0.0.0 192.168.2.2 track 1

ip route 0.0.0.0 0.0.0.0 10.1.1.1 10

!

ip http server

no ip http secure-server

!

control-plane

!

line con 0

line aux 0

line vty 0 4

login

!

scheduler allocate 20000 1000

end

Router#

this one also tried

SH RUN

Building configuration...

Current configuration : 1263 bytes

!

version 12.4

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname Router

!

boot-start-marker

boot-end-marker

!

no aaa new-model

!

resource policy

!

ip cef

!

no ip dhcp use vrf connected

!

--More-- ip dhcp pool satish

network 10.1.1.0 255.255.255.240

default-router 10.1.1.5

!

ip sla monitor 1

type echo protocol ipIcmpEcho 192.168.2.2

timeout 1000

threshold 2

frequency 3

ip sla monitor schedule 1 life forever start-time now

!

track 1 rtr 1 reachability

!

interface FastEthernet0/0

ip address 192.168.2.1 255.255.255.252

ip route-cache policy

ip route-cache flow

duplex auto

--More-- speed auto

!

interface FastEthernet0/1

ip address 10.1.1.5 255.255.255.240

ip route-cache policy

ip route-cache flow

duplex auto

speed auto

!

ip local policy route-map DEFAULT-ROUTE-POLICY

ip route 0.0.0.0 0.0.0.0 192.168.2.2 track 1

ip route 0.0.0.0 0.0.0.0 10.1.1.1 10

!

no ip http server

no ip http secure-server

!

access-list 101 permit icmp any host 192.168.10.2 echo

route-map DEFAULT-ROUTE-POLICY permit 1

match ip address 101

set interface Null0

set ip next-hop 192.168.2.2

!

--More-- !

!

control-plane

!

line con 0

line aux 0

line vty 0 4

login

!

scheduler allocate 20000 1000

end

Router#

please check out the file ,it rar file ,so please delete txt extension then you will be able to check it out

Rick Morris · ‎04-15-2010

Are you using a layer 3 switch?

If so then set up HSRP on the routers:

http://www.networkstraining.com/cisco-router-hsrp-configuration/

In your switch point your default gateway to the virtual IP being used for HSRP.

One important step is to make sure on the primary router you have preempt applied so when the primary link becomes available it will assume the role as primary again.

If you do a search in cisco.com you will find other examples too.

With what you have below it is not set-up very well. You are taking your traffic to one router then when the link goes down that primary router then sends the traffic to the other router. This step should be done on the switch, with a little help with the HSRP set-up.

I would post a traceroute from a host to confirm but I am pretty sure that is what is happening here.

satishsingh_24 · ‎04-15-2010

it unamanged layer 2 switch ,so no option to define hsrp and another thing i have only one cisco router and another router is from k adsl router .so on it does not have option to define HSRP .

please suggest any other way if you can think .

Rick Morris · ‎04-15-2010

If you have access to the DSL router then set up VRRP

This is the same thing as HSRP, but NOT cisco only.

Here is a link to the sample config.

The vip will be the default gateway for the clients.

http://inetpro.org/wiki/VRRP_Configuration

satishsingh_24 · ‎04-15-2010

hi sir

adsl router does not have option to define vrrp .

any other way to do the same