I have two ISP, the main on Dialer0 and the backup on Fa0/1,
I have setup an ip sla on the ADSL link to check if he's up
or not and then fallback on the second provider link (fa0/1).
Everything works well when the ADSL is down (when the nat goes
through the backup link) but as soon as the ADSL is ok the
NAT doesn't want to work. I've tried to nat overload on BVI1
or on Dialer0 (where I use to do when there were no bridge)
it makes no differences
I've already done a lot of theses setups with two isp and it
works well but without the bridge (and I realy need it here)
Thank you !
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
FastEthernet0/0 : LAN (nat inside) - Here I plug my laptop with ip 10.0.0.2/24
FastEthernet0/1 : Backup WAN (nat outside)
Dialer0 : Main WAN (nat outside)
FastEthernet0/1/0 - 3 : WAN Bridge Dialer0
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
boot-start-marker
boot system flash c2800nm-adventerprisek9-mz.124-25e.bin
boot-end-marker
!
ip cef
!
ip sla monitor 1
type pathEcho protocol ipIcmpEcho 8.8.4.4
timeout 1000
threshold 3
ip sla monitor schedule 1 life forever start-time now
ip sla monitor 2
type pathEcho protocol ipIcmpEcho 109.159.248.158
timeout 1000
frequency 3
ip sla monitor schedule 2 life forever start-time now
!
track 1 rtr 1 reachability
!
track 2 rtr 2 reachability
!
track 101 list boolean or
object 1
object 2
!
bridge irb
!
interface FastEthernet0/0
description LAN /w NAT inet and failover
ip address 10.0.0.1 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/1
description Demon's network 193.195.220.x
ip address 193.195.220.236 255.255.255.240
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/2/0
switchport access vlan 2
!
interface FastEthernet0/2/1
switchport access vlan 2
!
interface FastEthernet0/2/2
switchport access vlan 2
!
interface FastEthernet0/2/3
switchport access vlan 2
!
interface ATM0/1/0
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip route-cache flow
atm restart timer 300
no atm ilmi-keepalive
dsl operating-mode auto
!
interface ATM0/1/0.1 point-to-point
pvc 0/38
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
!
interface Vlan1
no ip address
!
interface Vlan2
description BT's network 217.36.70.x
no ip address
no ip unreachables
ip tcp adjust-mss 1452
bridge-group 1
!
interface Dialer0
ip unnumbered BVI1
no ip redirects
no ip unreachables
no ip proxy-arp
encapsulation ppp
ip route-cache flow
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap pap callin
ppp chap hostname XXXXXXXXXX
ppp chap password 7 XXXXXXXXXX
ppp pap sent-username XXXXXXXXX password 7 XXXXXXXXXX
!
interface BVI1
description BT's network 217.36.70.x
ip address 217.36.70.157 255.255.255.248
ip nat outside
ip virtual-reassembly
ip tcp adjust-mss 1452
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Dialer0 track 101
ip route 0.0.0.0 0.0.0.0 FastEthernet0/1 193.195.220.225 250
ip route 8.8.4.4 255.255.255.255 Dialer0
ip route 109.159.248.158 255.255.255.255 Dialer0
!
!
ip nat inside source route-map isp1 interface BVI1 overload
ip nat inside source route-map isp2 interface FastEthernet0/1 overload
!
ip access-list extended LAN_RANGE
permit ip 10.0.0.0 0.0.0.255 any
!
route-map isp2 permit 10
match ip address LAN_RANGE
match interface FastEthernet0/1
!
route-map isp1 permit 10
match ip address LAN_RANGE
match interface BVI1
!
!
control-plane
!
bridge 1 protocol ieee
bridge 1 route ip
!
!
end
