default route without main routing table

[Krasnoperov]

Hi, my problem is

I have a router with 2 isp

f0/0.1

ip address 1.1.1.2

f0/0.2

ip address 2.2.2.2

for some reasons I can't have routes default like this

ip route 0.0.0.0 0.0.0.0 1.1.1.1

ip route 0.0.0.0 0.0.0.0 2.2.2.1

for replying ICMP to my WAN addresses

how can I do get success ping from outside world to my WAN addresses 1.1.1.2 and 2.2.2.2 else?

I trying route-map TTT on one of my interfaces, but don't get success result

interface f0/0.1

ip policy route-map TTT

route-map TTT

match ip address DEF

set next-hop 1.1.1.1

access-list DEF

permit icmp host 1.1.1.2 any

permit icmp any host 1.1.1.2

Thanks

[smitesh kharecha]

Hi,

Do you want to load balance traffic across to both ISP links or use 2nd link as backup link in event primary fails ??

Regards,

Smitesh

[Krasnoperov]

Hi,

No in fact I dont won't to do any load balancing, my goal is just recieve success ping from internet to my WAN addresses

1.1.1.2 and 2.2.2.2

if I do this

ip route 0.0.0.0 0.0.0.0 1.1.1.1

ip route 0.0.0.0 0.0.0.0 2.2.2.1

my pings from internet works fine, they are success, but I have BIG reason, I can't use default routes in my routing table, so I ned another method

And actualy I'm always think that if I have two routes

ip route 0.0.0.0 0.0.0.0 1.1.1.1

ip route 0.0.0.0 0.0.0.0 2.2.2.1

my cisco router do some kind of round robin load balance

is this correct?

[cadet alain]

Hi,

Can we know why you don't want static routes in your RIB?

Regards.

Alain.

[Krasnoperov]

Because, very soon on this device I'll get BGP default routes

[cadet alain]

Hi,

So you want from an internet address to ping both outside interfaces? and it's not working?

Can you do a traceroute to these addresses?

Get rid of your PBR config which is not good anyway.

Regards.

Alain

[Krasnoperov]

Hi,

so if I get rid from my PBR, how can my router knows where to send reply packets?

[cadet alain]

Hi,

if you don't have any static routes you'll have a problem indeed but the PBR you configured was not correct.

let me think it over and I'll post a config but before some questions:

-you want inside traffic to get out also so not just ping the outside interfaces?

-you want primary/backup ?

One note PBR will be process-switched so per packet forwarding, are you using delay sensitive apps and/or udp apps?

Regards.

Alain.

[Krasnoperov]

Ok, here is my answers

Q:-you want inside traffic to get out also so not just ping the outside interfaces?

A:my inside traffic going to outside with PBR which assign to my inside (lan interface), passing through my NAT statements, and goes out, and it works just fine. My goal for now, just get ICMP reply from my WAN interfaces, I need it for monitoring reason from internet.

Q:-you want primary/backup ?

A: Nope, just ICMP reply

Q:One note PBR will be process-switched so per packet forwarding, are you using delay sensitive apps and/or udp apps?

A: For this particular case NO, I dont use delay sensitive apps. But it's interesting, you mean that PBR is more intensive for my CPU, than just classic routing?

[cadet alain]

Hi,

Q:you mean that PBR is more intensive for my CPU, than just classic routing?

A:yes PBR packets are processed-switched by default but you can fast-switch them but it will be less efficient than normal routing that uses CEF.

Now if you ping your routers interface then it is locally generated packets from the router which will reply so the PBR must be applied this way: ip local-policy route-map

Q:And actualy I'm always think that if I have two routes

ip route 0.0.0.0 0.0.0.0 1.1.1.1

ip route 0.0.0.0 0.0.0.0 2.2.2.1

my cisco router do some kind of round robin load balance

is this correct?

A:If you were using process-switching this would be true but the default is CEF switching and it does src-dst ip load-balancing not round-robin.

Regards.

Alain.

[cadet alain · Accepted solution]

Hi,

here is a config:

route-map PBR 10

match interface f0/0.1

set interface f0/0.1

route-map PBR 20

match interface f0/0.2

set interface f0/0.2

ip local-policy route-map PBR

Regards.

Alain.

[Krasnoperov]

it's just perfect for me, thank you