I have a Cisco 2921 router with 3 ethernet interfaces. E0/0 is has just been setup to commuicate on secondary ISP.
E0/1 is configured as the interface that connects to my firewall.
E0/2 is setup as my default route and all traffic goest out this interface.
I'd like to be able to keep the traffic flowing out of interface e0/2, but make sure that when it fails traffic flows out of e0/0. Once the line has been restored, I'd like for traffic to be restored to the primary link. I have attached a copy of my running config to this email.
Building configuration...
Current configuration : 4860 bytes
!
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
!
no ipv6 cef
no ip source-route
ip cef
!
!
!
!
!
ip domain name yourdomain.com
ip name-server 8.8.8.8
ip name-server 4.2.2.2
multilink bundle-name authenticated
!
!
crypto pki token default removal timeout 0
!
!
!
!
!
username ***** privilege 15 secret * ******************************
!
!
!
!
!
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
description ISP Interface #2
ip address 192.x.x.195 255.255.x.x
ip access-group 100 in
ip access-group 100 out
duplex auto
speed auto
!
interface GigabitEthernet0/1
description ISP Interface #1
ip address 50.x.x.254 255.255.x.x
ip access-group 100 in
ip access-group 100 out
duplex auto
speed auto
!
interface GigabitEthernet0/2
description Inside WAN Interface
ip address 50.x.x.82 255.255.x.x
ip flow ingress
ip flow egress
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
ip forward-protocol nd
!
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip flow-top-talkers
top 15
sort-by bytes
!
ip nat inside source list test interface GigabitEthernet0/2 overload
ip route 0.0.0.0 0.0.0.0 50.x.x.81
!
ip access-list extended test
permit ip 0.0.0.0 255.255.255.0 any
permit ip any any
!
access-list 100 permit ip any any
access-list 100 permit icmp any any echo
access-list 100 permit icmp any any echo-reply
!
!
!
control-plane
!
!
!
line con 0
login local
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
access-class 23 in
privilege level 15
login local
transport input telnet ssh
line vty 5 15
access-class 23 in
privilege level 15
login local
!
scheduler allocate 20000 1000
end
