Configuring my C891F

[Hakim RS]

Hi Everyone,

I have a Cisco 891F router, i need to configure two LAN s segements on this router and connect it with two ISP's router. One ISP will be placed on the Gi8 interface and the other with Fa0

My question is , how can i configure the router so the first LAN will be served from the first ISP. And the second LAN with th other

[a.alekseev · Accepted solution]

someting like this

ip vrf ISP1

 rd 1:1

ip vrf ISP2

 rd 2:2

!

!

ip dhcp pool vlan1-pool

import all

vrf ISP1

network 192.168.0.0 255.255.255.0

default-router 192.168.0.1

dns-server 8.8.8.8

!

!

ip dhcp pool vlan2-pool

import all

vrf ISP2

network 192.168.1.0 255.255.255.0

default-router 192.168.1.1

dns-server 8.8.8.8

!

interface GigabitEthernet0

no ip address

spanning-tree portfast

switchport access vlan 1

!

interface GigabitEthernet1

no ip address

spanning-tree portfast

switchport access vlan 2

!

interface GigabitEthernet2

no ip address

spanning-tree portfast

!

interface GigabitEthernet3

no ip address

spanning-tree portfast

!

interface GigabitEthernet4

no ip address

spanning-tree portfast

!

interface GigabitEthernet5

no ip address

spanning-tree portfast

!

interface GigabitEthernet6

no ip address

spanning-tree portfast

!

interface GigabitEthernet7

no ip address

!

interface GigabitEthernet8

description ## ISP1 ##

ip vrf forwarding ISP1

ip nat outside

ip address x.x.x.x x.x.x.x


!

interface GigabitEthernet9

description ## ISP2 ##

ip vrf forwarding ISP2

ip address y.y.y.y y.y.y.y

ip nat outside


!

!

interface Vlan1

ip vrf forwarding ISP1

ip address 192.168.0.1 255.255.255.0

ip nat inside

ip tcp adjust-mss 1380

!

interface Vlan2

ip vrf forwarding ISP2

ip address 192.168.1.1 255.255.255.0

ip nat inside

ip tcp adjust-mss 1380

!

!

route-map NAT-ISP1 permit 10

match interface GigabitEthernet8

! 

!

route-map NAT-ISP2 permit 10

match interface GigabitEthernet9

! 

!

ip nat inside source route-map NAT-ISP1 interface GigabitEthernet8 vrf ISP1 overload

ip nat inside source route-map NAT-ISP2 interface GigabitEthernet9 vrf ISP2 overload

ip route vrf ISP1 0.0.0.0 0.0.0.0 x.x.x.x name ISP1

ip route vrf ISP2 0.0.0.0 0.0.0.0 y.y.y.y name ISP2 

[Hakim RS]

Thank you a.alekseev for sharing this

I ll try to configure my router the same way and tell u the results

[a.alekseev]

ip vrf lan-employes
rd 65000:99
route-target export 65000:99
route-target import 65000:1
!
ip vrf lan-etudiants
rd 65000:98
route-target export 65000:98
route-target import 65000:2
!
ip vrf proximus
rd 65000:2
route-target export 65000:2
route-target import 65000:98
!
ip vrf voo
rd 65000:1
route-target export 65000:1
route-target import 65000:99
!

for get this working you must use BGP

[Hakim RS]

like this ?

router bgp 65000
bgp log-neighbor-changes
!
address-family ipv4 vrf lan-employes
redistribute connected
exit-address-family
!
address-family ipv4 vrf lan-etudiants
redistribute connected
exit-address-family
!
address-family ipv4 vrf proximus
redistribute connected
default-information originate
exit-address-family
!
address-family ipv4 vrf voo
redistribute connected
default-information originate
exit-address-family

[a.alekseev]

yes.

interface GigabitEthernet8
description **voo**
ip vrf forwarding voo
no ip address
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!

You haven't ip address configured...

[Hakim RS]

yeah yeah i corrected it, but still no result

[a.alekseev]

look at routing table for vrfs

I must also redistribute defaults routes.

[Hakim RS]

How can i doo that please?

[a.alekseev]

!
route-map STATIC2BGP permit 10
 match tag 999
!
ip route vrf voo 0.0.0.0 0.0.0.0 192.168.0.1 name voo tag 999
ip route vrf proximus 0.0.0.0 0.0.0.0 10.0.0.1 name proximus tag 999
!
router bgp 65000
bgp log-neighbor-changes
!
address-family ipv4 vrf lan-employes
redistribute connected
exit-address-family
!
address-family ipv4 vrf lan-etudiants
redistribute connected
exit-address-family
!
address-family ipv4 vrf proximus
redistribute connected
redistribute static route-map STATIC2BGP
default-information originate
exit-address-family
!
address-family ipv4 vrf voo
redistribute connected
redistribute static route-map STATIC2BGP
default-information originate
exit-address-family

[Hakim RS]

stiill i don t any result :s i can teven ping 8.8.8.8 from my router or even ping the ISP router 192.168.0.1

[a.alekseev]

show your routing tables

[Hakim RS]

RouterC891F#sh ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
a - application route
+ - replicated route, % - next hop override

Gateway of last resort is not set

RouterC891F#sh ip route vrf voo

Routing Table: voo
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
a - application route
+ - replicated route, % - next hop override

Gateway of last resort is 192.168.0.1 to network 0.0.0.0

S* 0.0.0.0/0 [1/0] via 192.168.0.1
192.168.0.0/24 is variably subnetted, 3 subnets, 2 masks
C 192.168.0.0/24 is directly connected, GigabitEthernet8
S 192.168.0.1/32 [254/0] via 192.168.0.1, GigabitEthernet8
L 192.168.0.4/32 is directly connected, GigabitEthernet8

RouterC891F#sh ip route vrf proximus

Routing Table: proximus
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
a - application route
+ - replicated route, % - next hop override

Gateway of last resort is not set

192.168.20.0/24 is variably subnetted, 2 subnets, 2 masks
B 192.168.20.0/24
is directly connected (lan-etudiants), 00:30:23, Vlan200
L 192.168.20.1/32 is directly connected, Vlan200

RouterC891F#sh ip route vrf lan-etudiants

Routing Table: lan-etudiants
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
a - application route
+ - replicated route, % - next hop override

Gateway of last resort is not set

192.168.20.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.20.0/24 is directly connected, Vlan200
L 192.168.20.1/32 is directly connected, Vlan200

RouterC891F#sh ip route vrf lan-employes

Routing Table: lan-employes
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
a - application route
+ - replicated route, % - next hop override

Gateway of last resort is 192.168.0.1 to network 0.0.0.0

B* 0.0.0.0/0 [20/0] via 192.168.0.1 (voo), 00:06:22
192.168.0.0/24 is variably subnetted, 2 subnets, 2 masks
B 192.168.0.0/24
is directly connected (voo), 00:30:59, GigabitEthernet8
L 192.168.0.4/32 is directly connected, GigabitEthernet8

[a.alekseev]

where is no route for 10.0.0.1 in vrf proximus

so default route is not working.

how did you checked that ping 8.8.8.8 is not working?

[Hakim RS]

well now i putted an isp on gi8 (192.168..0.1) the gi8 got an ip ( 192.168.0.4)

on priviliged mod i tried to ping the 192.168.0.1 and 8.8.8.8 but doesn t work