cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
659
Views
0
Helpful
1
Replies

Cisco 1811w + dual wan failover on DHCP ISP

cmorrow132
Level 1
Level 1

Ok so my setup is, I have 2 vlans currently routing through fa0 on cable internet with DHCP. I want to be able to plug dsl, also dhcp, into fa1 and have it work as an auto failover if fa0 goes down. I am just not sure of how to proceed. All the examples I have seen online work witout NATing in place, plus I have ports open to go to a machine on vlan10, so if someone could point me in the right direction, I would much appreciate it.

version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$I9I.$nqNqNaH..3CJ6xtB7FSVR0
enable password 7 106D5E4853441F1C1445
!
no aaa new-model
!
!
dot11 syslog
!
!
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 10.0.0.1 10.0.0.10
ip dhcp excluded-address 10.10.0.1 10.10.0.2
!
ip dhcp pool Lan1DHCP
    network 10.0.0.0 255.255.255.0
    default-router 10.0.0.1 
    dns-server 8.8.8.8 
!
ip dhcp pool FamDHCP
    network 10.10.0.0 255.255.0.0
    default-router 10.10.0.1 
    dns-server 8.8.8.8 
!
!
!
multilink bundle-name authenticated
!
!
! 
!
archive
log config
hidekeys
!
!
!
!     
interface FastEthernet0
  ip address dhcp
  ip nat outside
  ip virtual-reassembly
  duplex auto
  speed auto
!         
interface FastEthernet1
  ip address dhcp
  ip nat outside
  ip virtual-reassembly
  duplex auto
  speed auto
!         
interface FastEthernet2
   switchport access vlan 10
   !         
interface FastEthernet3
   switchport access vlan 10
!         
interface FastEthernet4
   switchport access vlan 10
!         
interface FastEthernet5
   switchport access vlan 10
!         
interface FastEthernet6
!         
interface FastEthernet7
!         
interface FastEthernet8
!         
interface FastEthernet9
   switchport access vlan 20
!         
interface Vlan1
   no ip address
!
interface Vlan10
   ip address 10.0.0.1 255.255.255.0
   ip nat inside
   ip virtual-reassembly
!         
interface Vlan20
   ip address 10.10.0.1 255.255.0.0
   ip nat inside
   ip virtual-reassembly
!         
interface Async1
   no ip address
   encapsulation slip
!         
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 dhcp
!         
!         
no ip http server
no ip http secure-server
ip nat inside source list 101 interface FastEthernet0 overload
ip nat inside source list 102 interface FastEthernet0 overload
ip nat inside source static tcp 10.0.0.200 80 interface FastEthernet0 80
ip nat inside source static tcp 10.0.0.200 443 interface FastEthernet0 443
!         
access-list 101 permit ip 10.0.0.0 0.0.0.255 any
access-list 101 permit tcp any host 0.0.0.0 eq www
access-list 101 permit tcp any host 0.0.0.0 eq 443
access-list 102 permit ip 10.10.0.0 0.0.255.255 any
!
!
end
1 Reply 1

Philip D'Ath
VIP Alumni
VIP Alumni

Here is an example using a route-map that you can adapt to your configuration.

route-map ISP1 permit 10
 match ip address 101
 match interface FastEthernet0
!
route-map ISP2 permit 10
 match ip address 102
 match interface FastEthernet1

ip nat inside source route-map ISP1 interface FastEthernet0 overload
ip nat inside source route-map ISP2 interface FastEthernet1 overload