Below is a very simple IP SLA configuration. It is designed to monitor traffic across an Metro connection (10.100.8.1) and if that connection goes down, route through a VPN over the internet to the remote end (10.1.1.42). Track shows reeachability and all looks correct; I can do a source ping over the secondary route and it is a good route. Unfortuantely, turning down the main interface, it does not work and traffic does not route to secondary interface. Any ideas?
!
license udi pid CISCO2911/K9 sn FTX1551AKU0
!
!
username celtictech privilege 15 secret 5 $1$qdHW$gnOIDoLFd6LElmKMXdHhv/
username coadmin privilege 15 password 7 14141D0A08092325777B60657B
!
redundancy
!
!
!
track 1 ip sla 1 reachability
!
class-map match-any call-sig
match ip dscp cs3
match ip dscp af31
class-map match-any protocols
match ip dscp cs6
match ip dscp cs7
class-map match-any voice
match ip dscp ef
!
!
policy-map voip
class voice
priority percent 33
class call-sig
bandwidth percent 10
class protocols
bandwidth percent 5
class class-default
fair-queue
random-detect
!
!
!
!
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
description MetroE WAN
bandwidth 10000
ip address 10.100.8.2 255.255.255.252
duplex auto
speed auto
service-policy output voip
!
interface GigabitEthernet0/1
bandwidth 100000
ip address 192.168.0.1 255.255.255.0
duplex auto
speed auto
service-policy output voip
!
interface GigabitEthernet0/2
description to Colo via FW VPN
ip address 100.1.1.41 255.255.255.252
duplex auto
speed auto
!
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip route 0.0.0.0 0.0.0.0 10.100.8.1 track 1 (main route)
ip route 0.0.0.0 0.0.0.0 100.1.1.42 10 (backup route with higher metric)
ip route 100.1.10.0 255.255.255.0 100.1.1.42
ip route 192.168.3.0 255.255.255.0 192.168.0.25
ip route 192.168.5.0 255.255.255.0 192.168.0.25
ip route 192.168.10.0 255.255.255.0 192.168.0.25
!
ip sla responder
ip sla 1
icmp-echo 10.100.8.1 source-interface GigabitEthernet0/0
threshold 2
timeout 1000
frequency 3
ip sla schedule 1 life forever start-time now
logging 10.100.8.132
!
!
!
!
!
!
!
!
control-plane
!
!
!
line con 0
password 7 060506324F41
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
privilege level 15
password 7 124A50444158595779687509
logging synchronous
transport input telnet ssh
!
scheduler allocate 20000 1000
end
Peter Buswell (aka DrVoIP)
http://blog.drvoip.com
Peter Buswell (aka DrVoIP)
http:/drvoip.com/blog
