Showing results for 
Search instead for 
Did you mean: 

Cisco Community Designated VIP Class of 2020


ISR w 12.4 and dual isp not behaving as expected

Hello all.

First off, this is not the first time I did this... but it is the first time in 12.4...  and it seems there have been changes that are causing me issues.

Here is a sample of what I had done in 12.3 which worked perfectly.


interface Ethernet0

description Internal Side

ip address

ip nat inside


interface Ethernet1

description Internet Side

ip address secondary

ip address

ip nat outside


ip nat inside source static tcp 80 80 extendable

ip nat inside source static tcp 80 80 route-map biWAN-PAE extendable


ip classless

ip route permanent


route-map biWAN-PAE permit 10

set ip next-hop



Now when I try to do this in 12.4, it simply won't work.  First it won't allow the two "ip nat inside source static" commands as-is.  I need to define them with a route-map each.  So I created another route-map with a "set ip next-hop" for the gateway.  But all my traffic is headed to regardless of what translation/route-map it uses.

My thought at this point is to setup a loopback interface for all 'outside' traffic and try to setup a route-map on the loopback interface so I can have the route-map ACLs working on public IP addresses...

Thoughts on this?

Thanks!  -Cheers, Peter.


Re: ISR w 12.4 and dual isp not behaving as expected



Re: ISR w 12.4 and dual isp not behaving as expected


First of all my question to you would be : "why are you implementing NAT in this fashion?"

You do not have multiple exit interfaces, just multiple public ip's. So whats the benefit of using two public ip's to access the same Internal server. I mean if that ISP link or the interface goes down, then both these public ip's would not work.

Secondly, while sending the traffic out, routing always happens before NAT. So even if you have "set ip next-hop" statement added in the route-map which is called on a NAT statement, it will not do anything because routing decision has been already made. So as a best practice, don't use "set ip next-hop" command in route-maps which are being used for NAT.

"set ip next-hop" command should only be used when PBR is implemented and the route-map is called under an interface using the "ip policy route-map" command.

Only after understanding your actual requirement, we can suggest a solution or a workaround.



Re: ISR w 12.4 and dual isp not behaving as expected

I am not worried so much about the interface failure as I am about Internet access failure.  The two IP blocks are provided over two different links which are consolidated via a ethernet switch.

I have read about the route being before nat... but I am thinking that there must be some way to route after nat.  Either by using a loopback interface or such, but I just have not come to a solution.

Thanks.  -Peter.

CreatePlease to create content
Content for Community-Ad
FusionCharts will render here