I am trying to use dual isp's connections on CISCO 881 by using static route track. I have problem that I can't ping, telnet secondary router IP from WAN. this is the reason that secondary connection is not doing fail over. sla all commands are ok and its working fine. Its look like issue with nating. only primary route is active and I can ping and telnet from WAN. I want a solution that both addresses are pingable, telnet from WAN, with failover.
Configuration file:
ip dhcp pool phones
network 192.168.1.0 255.255.255.0
default-router 192.168.1.254
dns-server 135.196.0.6 xx.196.0.xx 8.8.8.8
track 1 ip sla 1 reachability
interface FastEthernet 3
switchport mode access vlan 3
int fastethernet 2
switchport mode access vlan 2
interface FastEthernet4
no ip address
shutdown
duplex auto
speed auto
interface Vlan1
no shutdown
description "TO LAN"
ip address 192.168.1.254 255.255.255.0
ip nat inside
interface Vlan2
no shut
description "UPLINK TO secondary isp"
ip address 217.33.177.xxx 255.255.255.0
ip nat outside
interface Vlan3
description "UP LINK TO primary isp"
ip address 212.2.29.yyy 255.255.255.248
ip nat outside
ip nat inside source list 100 interface Vlan3 overload
ip nat inside source list 101 interface vlan 2 overload
access-list 100 permit ip any any
access-list 101 permit ip any any
ip route 0.0.0.0 0.0.0.0 212.2.29.xxx track 1
ip route 0.0.0.0 0.0.0.0 217.33.177.153 10
ip sla 1
icmp-echo 212.2.29.105 source-interface Vlan3
frequency 5
ip sla schedule 1 life forever start-time now
access-list 100 permit ip any any
line vty 0 4
password 7 1400165A08102F2F
login local
transport input all
!
ntp server 81.171.136.217