06-22-2011 12:08 AM - edited 03-04-2019 12:46 PM
Hi Dears. This is my configuration. I configurated HSRP between 2 router. HSRP tracked outside interface and all of them is ok.
i have 2 ISP and this configurate on subinterface. I want to 192.168.10.0 NAT to ISP1(PAT) and 192.168.100.0 NAT to ISP2(PAT) at the same time.
if the ISP1 is down the 192.168.10.0 go to ISP2 and if the ISP2 is down the 192.168.100.0 NAT to ISP1.
i configurate that way but how I do the nat on redundancy?
redundancy
!
!
track timer interface 5
!
track 1 interface GigabitEthernet0/0 line-protocol ----- this used HSRP(i have no problem here)
!
track 100 ip sla 1 reachability
delay down 15 up 10
!
track 200 ip sla 2 reachability
delay down 15 up 10
!
!
!!
interface GigabitEthernet0/0
no ip address
ip virtual-reassembly
duplex auto
speed auto
!
!
interface GigabitEthernet0/0.105
description connected to ISP1
encapsulation dot1Q 105
ip address x.x.x.108 255.255.255.248
ip nat outside
ip virtual-reassembly
!
interface GigabitEthernet0/0.233
description connected to ISP2
encapsulation dot1Q 233
ip address x.x.x.234 255.255.255.248
ip nat outside
ip virtual-reassembly
!
interface GigabitEthernet0/1
ip address 10.0.0.1 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
standby 1 ip 10.0.0.3
standby 1 priority 110
standby 1 preempt
standby 1 track 1 decrement 20
!
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip nat inside source route-map ISP1 interface GigabitEthernet0/0.105 overload ---- this is my nat, this nat is work but i want the how do the redundancy nat?
ip nat inside source route-map ISP2 interface GigabitEthernet0/0.233 overload
ip route 0.0.0.0 0.0.0.0 x.x.x.110 track 100
ip route 0.0.0.0 0.0.0.0 x.x.x.233 254 track 200
ip route 192.168.10.0 255.255.255.0 10.0.0.2
ip route 192.168.100.0 255.255.255.0 10.0.0.2
!
ip sla 1
icmp-echo x.x.x.110 source-interface GigabitEthernet0/0.105
timeout 1000
threshold 40
frequency 3
ip sla schedule 1 life forever start-time now
i
ip sla 2
icmp-echo x.x.x.233 source-interface GigabitEthernet0/0.233
timeout 1000
threshold 40
frequency 3
ip sla schedule 2 life forever start-time now
access-list 101 permit ip 192.168.10.0 0.0.0.255 any
access-list 102 permit ip 192.168.100.0 0.0.0.255 any
!
!
!
!
route-map ISP2 permit 20
match ip address 102
set ip next-hop verify-availability x.x.x.233 10 track 200
set ip next-hop verify-availability x.x.x.110 20 track 100
!
route-map ISP1 permit 10
match ip address 101
set ip next-hop verify-availability x.x.x.110 10 track 100
set ip next-hop verify-availability x.x.x.233 20 track 200
06-26-2011 12:24 PM
You can change the NAT settings based on events with EEM.
Check this link:
06-27-2011 11:07 PM
you need to have a separate route map for each nat with match interface to have the nat working, in addition to the PBR route maps
have a look at the document i wrote in here, whcih will give a step by step example and wish will help you understand and configure your router as you want
https://supportforums.cisco.com/docs/DOC-8313
good luck
if helpful Rate
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide