06-13-2022 04:48 AM
i am trying to dedicate some traffic to one ISP connection from 1 source IP (10.200.50.2/248) and the ISP IP is 45.240.181.2.
I can ping from 10.200.50.2 to 45.240.181.2 but I can`t ping the ISP router 45.240.181.1?
here is the router configuration.
!
!
!
!
!
!
!
interface GigabitEthernet0/0
description connected interface to up-stream SW
mtu 1504
ip address 10.100.129.1 255.255.255.0
ip nat inside
ip virtual-reassembly
ip policy route-map CLIENT-ROUTER
duplex auto
speed auto
!
interface GigabitEthernet0/1
description connected interface to Tunnel SW
ip address 10.100.130.1 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet0/2/0
description connected to orange line
ip address 41.128.178.238 255.255.255.248
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/3/0
description "connected to ahly bank"
ip address 10.244.243.114 255.255.255.252
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/3/1
description connected to orange dedicated line
ip address 45.240.181.2 255.255.255.248
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
router rip
version 2
network 10.0.0.0
no auto-summary
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 41.128.178.233
ip route 10.200.50.0 255.255.255.248 45.240.181.1
ip http server
no ip http secure-server
!
!
ip nat inside source list 10 interface FastEthernet0/2/0 overload
ip nat inside source list 106 interface FastEthernet0/3/1 overload
!
access-list 10 permit 10.100.33.0 0.0.0.255
access-list 10 permit 10.100.129.0 0.0.0.255
access-list 105 permit ip 10.244.243.132 0.0.0.3 10.244.243.112 0.0.0.3
access-list 105 deny ip any any
access-list 106 permit ip 10.200.50.0 0.0.0.7 45.240.181.0 0.0.0.7
access-list 106 deny ip any any
!
!
!
!
route-map CLIENT-ROUTER permit 10
match ip address 105 106
set default interface FastEthernet0/3/0 FastEthernet0/3/1
!
!
!
control-plane
!
!
!
!
mgcp fax t38 ecm
06-14-2022 06:50 AM
interface GigabitEthernet0/0
description connected interface to up-stream SW
ip address 10.100.129.1 255.255.255.0 <-OK
ip nat inside <-OK
ip policy route-map CLIENT-ROUTER <-OK
!
interface GigabitEthernet0/1
description connected interface to Tunnel SW
ip address 10.100.130.1 255.255.255.0 <-OK
ip nat inside <- this need since I don't know from where the 10.200.50.2/248 is coming
ip policy route-map CLIENT-ROUTER <- this need since I don't know from where the 10.200.50.2/248 is coming
!
interface FastEthernet0/2/0
description connected to orange line
ip address 41.128.178.238 255.255.255.248 <-OK
ip nat outside <-OK
!
interface FastEthernet0/3/0
description "connected to ahly bank"
ip address 10.244.243.114 255.255.255.252 <-OK
ip nat inside <- this need since I don't know from where the 10.200.50.2/248 is coming
ip policy route-map CLIENT-ROUTER <- this need since I don't know from where the 10.200.50.2/248 is coming
!
interface FastEthernet0/3/1
description connected to orange dedicated line
ip address 45.240.181.2 255.255.255.248 <-OK
ip nat outside <-OK
!
router rip
version 2
network 10.0.0.0 <-OK IF THIS make US learn from where 10.200.50.2/248
no auto-summary!
ip route 0.0.0.0 0.0.0.0 41.128.178.233 <-OK this is default routing if PBR is failed
!
route-map CLIENT-ROUTER permit 10 <-OK
match ip address 105 <-OK need here since we match only this traffic to pass through this ISP
set interface FastEthernet0/3/1 <- no default word only set interface
!
access-list 105 permit ip 10.200.50.2/248 any <-this acl will match 10.200.50.2/248 which use CLINET-ROUTE as interface
!
ip nat inside source route-map OTHER-NAT interface FastEthernet0/2/0 overload <-I remove list because it use only if you have static and dynamic NAT
!
route-map OTHER-NAT permit 10 <-Add this since we have now two OUT NAT and one IN
match interface FastEthernet0/2/0 <-OK
!
ip nat inside source route-map CLIENT-NAT interface FastEthernet0/3/1 overload
!
route-map CLIENT-NAT permit 10
match interface FastEthernet0/3/1<-OK match interface only no need match ACL
please find my note in config
* you miss use 0/3/0 instead of 0/3/1
*there is read comment you do wrong or you need to add this line and explain
*there is green comment this only explain of line
06-15-2022 02:00 AM
thank you for your support i solved the problem.
06-15-2022 02:35 AM - edited 06-15-2022 02:36 AM
you are welcome,
you solve it as my suggestion or there is other issue, can I know ?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide