hi, I have a router asr1002 and I need that my loopback interface will be accessible from internet
ISP adderss space I have
46.xx.x.64 255.255.255.192
interface TenGigabitEthernet0/2/0.301
description -=ISP=-
encapsulation dot1Q 301
ip address 46.xx.x.66 255.255.255.248
interface Loopback0
description -=IPSEC-VPN=-
ip address 46.xx.x.99 255.255.255.255
!
ip local policy route-map ICMP_VPN_PERMIT
r#sh ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
a - application route
+ - replicated route, % - next hop override
Gateway of last resort is 46.xx.x.65 to network 0.0.0.0
B* 0.0.0.0/0 [20/0] via 46.xx.x.65, 02:11:34
r#sh route-map ICMP_VPN_PERMIT
route-map ICMP_VPN_PERMIT, permit, sequence 10
Match clauses:
ip address (access-lists): BGW_VPN_ICMP
Set clauses:
ip next-hop 46.xx.x.65
r#sh access-lists BGW_VPN_ICMP
Extended IP access list BGW_VPN_ICMP
11 permit icmp host 46.xx.x.99 any
from internet
64 bytes from 46.29.9.66: icmp_req=1 ttl=248 time=77.2 ms
64 bytes from 46.29.9.66: icmp_req=2 ttl=248 time=77.1 ms
64 bytes from 46.29.9.66: icmp_req=3 ttl=248 time=77.2 ms
64 bytes from 46.29.9.66: icmp_req=4 ttl=248 time=76.8 ms
--- PING 46.29.9.99 (46.29.9.99) 56(84) bytes of data. ---
--- 46.29.9.99 ping statistics ---
| packets transmitted | 9 |
| received | 0 |
| packet loss | 100 % |
| time | 8063 ms |
