Hello,
I've configured a router cisco 1921 for one ISP and works with different nat rules(for VoIP), now I've tried to add a 2nd ISP with failover without losing nat rules that I've configured in the 1st ISP interface. The problem is when I used a basic dual wan and failover configuration, internet works with the 1st ISP but lost the nat rules(VoIP not working) and also dual wan/failover not working. Here is the configuration:
(I've used Vlan2 for the 2nd ISP because I couldn't enter an @ip directly for the extension ports, I've got the error " ip addresses may not be configured on l2 links ")
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
description ## MY LAN ##
ip address 172.16.1.1 255.255.0.0
ip helper-address 172.16.1.50
ip nat inside
ip virtual-reassembly in
duplex auto
speed auto
no mop enabled
!
interface GigabitEthernet0/1
description ## IPS1 FIBRE ##
ip address 83.XX.XX.61 255.255.255.254
ip access-group MY_WAN in
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
interface GigabitEthernet0/0/0
description ## IPS2 FREEBOX ##
switchport access vlan 2
no ip address
!
interface GigabitEthernet0/0/1
no ip address
shutdown
!
interface GigabitEthernet0/0/2
no ip address
shutdown
!
interface GigabitEthernet0/0/3
no ip address
shutdown
!
interface Vlan1
no ip address
shutdown
!
interface Vlan2
ip address 192.168.1.2 255.255.255.0
ip access-group MY_WAN in
ip nat outside
ip virtual-reassembly in
!
ip forward-protocol nd
!
ip http server
ip http authentication local
no ip http secure-server
!
ip nat inside source list 100 interface GigabitEthernet0/1 overload
ip nat inside source list MY_LAN interface GigabitEthernet0/1 overload
ip nat inside source route-map isp1 interface GigabitEthernet0/1 overload
ip nat inside source route-map isp2 interface Vlan2 overload
ip route 0.0.0.0 0.0.0.0 83.XX.XX.60
ip route 0.0.0.0 0.0.0.0 78.XX.XX.69
!
ip access-list standard MY_LAN
permit 172.16.0.0 0.0.255.255
!
ip access-list extended MY_WAN
permit tcp any any established
deny tcp any any
permit ip any any
!
!
route-map isp2 permit 10
match ip address 100
match interface GigabitEthernet0/0/0 Vlan2
!
route-map isp1 permit 10
match ip address 100
match interface GigabitEthernet0/1
!
!
snmp-server community public RO
access-list 100 remark portfwd
access-list 100 remark CCP_ACL Category=2
access-list 100 remark sip
access-list 100 permit udp any host 172.16.1.50 range 5060 5062
access-list 100 remark sip1
access-list 100 permit udp any host 172.16.1.50 range 8060 8061
access-list 100 remark keyyo
access-list 100 permit udp any host 172.16.1.50 range 16384 16482
access-list 100 remark OVH
access-list 100 permit udp any host 172.16.1.50 range 30000 40000
access-list 100 remark ovh1
access-list 100 permit udp any host 172.16.1.50 range 2424 2427
access-list 100 remark HTTP
access-list 100 permit tcp any host 172.16.5.150 eq www
My 2nd ISP Freebox settings:
IP address: 78.XX.XX.69
Private IP address: 192.168.1.1
Thanks!
