I am working on a LTE backup configuration. I would like to have the cellular connection open constantly and establish a VPN connection even before a failure on the wired internet line occurs. This forces me to work with different VRFs. The VPN part, i have figured out and it is working fine. Sadly, the internet connection is used as a guest net for customers. So i have to think of a way to reroute the traffic from the wired, to the wireless (LTE) interface if there is an issue with the wired connection. I created following configuration:
ip vrf DSL
description Wired internet
ip vrf LTE
description Wireless internet
ip route vrf DSL 0.0.0.0 0.0.0.0 Dialer1
ip route vrf LTE 0.0.0.0 0.0.0.0 Cellular0/2/0
ip sla 111
icmp-echo 157.240.17.35
vrf DSL
threshold 500
timeout 800
frequency 3
ip sla 222
icmp-echo 104.244.42.1
vrf DSL
threshold 500
timeout 800
frequency 3
ip sla schedule 111 life forever start-time now
ip sla schedule 222 life forever start-time now
track 111 ip sla 111 reachability
track 222 ip sla 222 reachability
ip access-list extended FORCE_VRF_LTE
10 permit icmp any host 104.244.42.1
route-map FORCE_VRF_LTE permit 10
match ip address FORCE_VRF_LTE
set vrf LTE
ip local policy route-map FORCE_VRF_LTE
So basically, i have 2 VRFs with its corresponding default route. I create 2 IP SLAs in vrf DSL to simulate client traffic. Then, i want to force one of the pings out of the cellular interface. But this does not work. As soon as i enter the ip local policy command, the track 222 goes down. In the route-map i tried different commands like:
set ip default vrf LTE next-hop 1.1.1.1
set vrf LTE
set interface cellular0/2/0
But nothing worked so far. Is this even supposed to work? What am i missing? Pinging the different IPs manually from within the respecting VRF does work.
