Hello all,
I have a Cisco 2801 with two DSL cards that are both routing to the internet, with NAT to the private LAN interface. I am using IP SLA and route maps to accomplish this load balancing. I have rsolved most of the issues that come with this setup, but I still have a major issue: I cannot SSH into both of the WAN addresses, only one. I have included whqat I think is the most relevant config info.
#sh run
! ........some info omitted........!
!
!
ip sla 1
icmp-echo W.A.N.x source-interface Dialer1
timeout 1000
threshold 40
frequency 3
ip sla schedule 1 life forever start-time now
ip sla 2
icmp-echo W.A.N.y source-interface Dialer2
timeout 1000
threshold 40
frequency 3
ip sla schedule 2 life forever start-time now
!
!
key chain OER
key 1
key-string oerkey
!
!
oer master
max-range-utilization percent 88
!
!
border 1.1.1.1 key-chain OER
interface ATM0/1/0 external
max-xmit-utilization absolute 8000
interface ATM0/3/0 external
max-xmit-utilization absolute 8000
interface FastEthernet0/0 internal
!
learn
throughput
periodic-interval 88
aggregation-type prefix-length 32
mode route control
mode select-exit best
resolve range priority 1
resolve utilization priority 2 variance 1
!
oer border
local Loopback0
master 1.1.1.1 key-chain OER
!
!
track timer interface 5
!
track 100 interface Dialer1 ip routing
delay down 15 up 10
!
track 200 interface Dialer2 ip routing
delay down 15 up 10
!
!
!
interface Loopback0
ip address 1.1.1.1 255.255.255.0
!
!
interface FastEthernet0/0
description $LAN-INTERFACE = GATEWAY $
ip address 192.168.0.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip flow ingress
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
no mop enabled
!
!
interface ATM0/1/0
no ip address
ip virtual-reassembly
no ip mroute-cache
no atm ilmi-keepalive
dsl operating-mode auto
pvc 0/32
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
!
interface ATM0/3/0
no ip address
ip virtual-reassembly
no ip mroute-cache
no atm ilmi-keepalive
dsl operating-mode auto
pvc 0/32
encapsulation aal5mux ppp dialer
dialer pool-member 2
!
!
interface Dialer1
ip address negotiated
no ip proxy-arp
ip mtu 1478
ip nat outside
ip virtual-reassembly
encapsulation ppp
ip tcp adjust-mss 1452
dialer pool 1
no cdp enable
ppp authentication chap pap callin
ppp chap hostname XXXXXXXX
ppp chap password 0 XXXXXXXX
ppp ipcp dns request
ppp ipcp route default
ppp ipcp address accept
!
!
interface Dialer2
ip address negotiated
no ip proxy-arp
ip mtu 1478
ip nat outside
ip virtual-reassembly
encapsulation ppp
ip tcp adjust-mss 1452
dialer pool 2
no cdp enable
ppp authentication chap pap callin
ppp chap hostname XXXXXXXX
ppp chap password 0 XXXXXXXX
ppp ipcp dns request
ppp ipcp route default
ppp ipcp address accept
!
no ip classless
ip route 0.0.0.0 0.0.0.0 Dialer1 track 100
ip route 0.0.0.0 0.0.0.0 Dialer2 track 200
!
!
no ip http server
ip http access-class 23
ip http authentication local
no ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat translation tcp-timeout 3600
ip nat inside source route-map dialer1 interface Dialer1 overload
ip nat inside source route-map dialer2 interface Dialer2 overload
ip nat inside source static tcp 192.168.0.254 222 W.A.N.x 222 extendable
ip nat inside source static tcp 192.168.0.254 222 W.A.N.y 222 extendable
!
!
access-list 10 permit 192.168.0.0 0.0.0.255
access-list 23 permit 192.168.0.0 0.0.0.255
access-list 100 permit ip 192.168.0.0 0.0.0.255 any
access-list 123 permit tcp any any eq 22
dialer-list 1 protocol ip permit
dialer-list 2 protocol ip permit
!
!
route-map dialer2 permit 10
match ip address 100
match interface Dialer2
!
route-map dialer1 permit 10
match ip address 100
match interface Dialer1
!
!
line aux 0
line vty 0 4
access-class 123 in
privilege level 15
login local
transport input ssh
!
