02-08-2017 07:04 AM - edited 03-05-2019 08:00 AM
Hello,
I have a Cisco 2821 with 3 wic, 2 wic adsl and 1 wic eth. I need to configure the two adsl wics in load balancing and failover and in case of all the two adsl don't work, all the traffic must be routed on the eth wic wan.
The IOS version is 12.4
Can You help me?
Thanks
Salve,
ho un router Cisco 2821 con 3 interfacce wic, di cui due adsl e una wan. Avrei la necessità di far lavorare le due wic adsl in load balancing e fail over e, in caso nessuna delle due linee funzioni, il traffico esca sulla wan eth.
C'è qualcuno che mi può dare la configurazione?
La versione dell'os è la 12.4.
Grazie
Solved! Go to Solution.
07-29-2017 09:41 AM
Hello,
this is possibly due to the fact that your router does all the name lookups. You might be better of setting your clients to DHCP, and configure a DHCP pool on the router:
ip dhcp excluded-address 10.0.1.254
!
ip dhcp pool LAN
network 10.0.1.0 /24
default-router 10.0.1.254
dns-server 8.8.8.8 8.8.4.4
07-29-2017 11:24 AM
hello,
ok I try it, but if I put manually the dns server 8.8.8.8 in the devices the problem persist, is it normally?
I try with dhcp server but the problem doesn't solve
Thanks
Building configuration...
Current configuration : 4270 bytes
!
! Last configuration change at 18:28:27 UTC Sat Jul 29 2017 by admin
!
version 15.1
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname jjjjjjj
!
boot-start-marker
boot-end-marker
!
enable password iiiiiiii
!
no aaa new-model
!
!
dot11 syslog
ip source-route
!
!
ip cef
ip dhcp excluded-address 10.0.1.254
ip dhcp excluded-address 10.0.1.191
!
ip dhcp pool LAN
network 10.0.1.0 255.255.255.0
default-router 10.0.1.254
dns-server 8.8.8.8 208.67.222.222
!
!
ip domain name hhhhhh.local
ip name-server 8.8.8.8
ip name-server 208.67.222.222
ip name-server 8.8.4.4
ip name-server 208.67.220.220
!
multilink bundle-name authenticated
!
!
!
!
!
!
license udi pid CISCO2821 sn ggggggggg
username admin privilege 15 secret 5 ffffffffff
redundancy
!
!
ip ssh version 2
!
track 1 ip sla 1 reachability
delay down 10 up 10
!
track 2 ip sla 2 reachability
delay down 10 up 10
!
track 11 list boolean and
object 1
object 2
!
!
!
!
!
!
!
interface GigabitEthernet0/0
ip address 10.0.1.254 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
!
interface GigabitEthernet0/1
ip address e.e.e.e 255.255.255.248
ip nat outside
no ip virtual-reassembly
duplex auto
speed auto
!
interface ATM0/0/0
no ip address
no atm ilmi-keepalive
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
!
interface ATM0/1/0
no ip address
no atm ilmi-keepalive
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 2
!
!
interface Dialer0
ip address negotiated
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 1
dialer-group 1
ppp authentication chap pap callin
ppp chap hostname @alicebiz.routed
ppp chap password 0 @alicebiz.routed
no cdp enable
!
interface Dialer1
ip address negotiated
ip nat outside
ip virtual-reassembly
encapsulation ppp
ip tcp header-compression
dialer pool 2
dialer-group 2
ppp authentication chap pap callin
ppp chap hostname @alicebiz.routed
ppp chap password 0 @alicebiz.routed
no cdp enable
!
ip local policy route-map IPSLA
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip dns server
ip nat translation timeout 420
ip nat translation tcp-timeout 120
ip nat translation pptp-timeout 420
ip nat translation udp-timeout 120
ip nat translation finrst-timeout 300
ip nat translation syn-timeout 120
ip nat translation icmp-timeout 120
ip nat translation max-entries 5000
ip nat inside source route-map BACKUP interface GigabitEthernet0/1 overload
ip nat inside source route-map DIAL0 interface Dialer0 overload
ip nat inside source route-map DIAL1 interface Dialer1 overload
ip route 0.0.0.0 0.0.0.0 Dialer0 track 1
ip route 0.0.0.0 0.0.0.0 Dialer1 track 2
ip route 0.0.0.0 0.0.0.0 d.d.d.d(gateway ip) 10
!
ip access-list extended SLA1
permit icmp any host 8.8.4.4 echo
permit udp host b.b.b.b eq 22 any
permit tcp host b.b.b.b eq 22 any
ip access-list extended SLA2
permit icmp any host 4.2.2.2 echo
permit udp host a.a.a.a eq 22 any
permit tcp host a.a.a.a eq 22 any
!
ip sla auto discovery
ip sla 1
icmp-echo 8.8.4.4 source-interface Dialer0
threshold 500
frequency 5
ip sla schedule 1 life forever start-time now
ip sla 2
icmp-echo 4.2.2.2 source-interface Dialer1
threshold 500
frequency 5
ip sla schedule 2 life forever start-time now
access-list 1 permit 10.0.1.0 0.0.0.255
access-list 5 permit 10.0.1.0 0.0.0.255
access-list 8 permit 10.0.1.0 0.0.0.255
access-list 15 permit 10.0.1.150
access-list 15 permit 10.0.1.191
access-list 20 permit 10.0.1.0 0.0.0.255
!
!
!
route-map BACKUP permit 10
match ip address 1
match interface GigabitEthernet0/1
!
route-map DIAL0 permit 10
match ip address 1
match interface Dialer0
!
route-map DIAL1 permit 10
match ip address 1
match interface Dialer1
!
route-map IPSLA permit 10
match ip address SLA1
set interface Dialer0
!
route-map IPSLA permit 20
match ip address SLA2
set interface Dialer1
!
route-map WWW permit 10
match ip address 100
set interface Dialer0
!
!
!
control-plane
!
!
line con 0
line aux 0
line vty 0 4
access-class 8 in
exec-timeout 5 0
login local
transport input ssh
!
scheduler allocate 20000 1000
end
07-29-2017 11:27 AM
Hello,
it shouldn't make a difference. That said, I checked your configuration again and saw that you have 'ip dns server' configured globally. Try and remove that from your configuration:
Router(config)#no ip dns server
07-29-2017 11:40 AM
Hello,
without dns server, the 8/10 of requests of resolving are timed-out.
If I disable the load balancing all work normally
thanks
07-29-2017 11:57 AM
Hello,
I don't remember all the specifics of the original problem, but where did you apply route map WWW ? I don't see it applied anywhere...
07-29-2017 12:06 PM
Hello,
The original problem was 2 connection with load balance (adsl Wic) and a backup on eth 0/1.
If I apply route-map WWW on eth0/0 (lan) dns and ftp work well, but the load balance and fail over don't work and all traffic go out only with dial 0
Thanks
07-29-2017 12:41 PM
OK. I would go back to the original config where you had a success rate of 8/10, and check what happens if you flush the DNS cache on your client:
C:\windows\system32>ipconfig /flushdns
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
02-12-2017 07:33 AM
Hello,
I had tried the config but when i disconnect the dsl on wic 0 all the connection go down and don't go on the second dsl wic.
Can you help me?
Thanks
02-12-2017 08:25 AM
Hello,
can you post the configuration you have now ? I'll have a look...
02-12-2017 08:32 AM
02-12-2017 09:05 AM
Hello,
try and add this to your access list 1:
access-list 1 permit 192.168.1.0 0.0.0.255
02-12-2017 09:11 AM
Hello,
ok tomorrow I will try this configuration.
I can try the configuration of the dsl connections without the connection on the ethernet?
Thanks
02-12-2017 10:19 AM
Hello,
you can test without the Ethernet connection, obviously the failover will not work properly without anything being actually connected to GigabitEthernet0/1...
02-12-2017 10:20 AM
Hello,
Ok, thanks
03-09-2017 07:28 AM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide