PRB and next-hop

[jquintard]

Hello,

I have changed my router conf from a classic NAT settings with one DSL link :

ip route 0.0.0.0 0.0.0.0 Dialer0
access-list 1 permit 10.10.10.0 0.0.0.255
ip nat inside source list 1 interface Dialer0 overload

To a dual DSL links with PBR :

ip sla 20
 icmp-echo 1.1.1.1
 frequency 5
ip sla schedule 20 life forever start-time now
ip sla 40
 icmp-echo 2.2.2.2
 frequency 5
ip sla schedule 40 life forever start-time now
track 20 ip sla 20 reachability
 delay down 1 up 1
track 40 ip sla 40 reachability
delay down 1 up 1
access-list 120 permit ip 10.10.10.0 0.0.0.31 any
access-list 140 permit ip any any
route-map PBR permit 20
match ip address 120
 set ip next-hop verify-availability 1.1.1.1 1 track 20
route-map PBR permit 40
match ip address 140
 set ip next-hop verify-availability 2.2.2.2 1 track 40
interface GigabitEthernet0/1.101
    ip policy route-map PBR
ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/0.20 track 20
ip route 0.0.0.0 0.0.0.0 Dialer0 track 40
access-list 1 permit 10.10.10.0 0.0.0.255
route-map ADSL permit 10

 match ip address 1
match interface Dialer0

route-map SDSL permit 10  
match ip address 1  
match interface GigabitEthernet0/0.20

ip nat inside source route-map ADSL interface Dialer0 overload
ip nat inside source route-map SDSL interface GigabitEthernet0/0.20 overload

That work perfectly but I have a little problem. The next-hop I use, is changed some times on my ADSL link. I can verify with IP SLA the last-hop router on my ISP network, this router probably never changed but what I must use with the next-hop command in the route-map PBR permit 40 ?

Thanks

Jerome

[cadet alain]

Hi,

you don't need to use  verify-availability  if you are doing tracking.

Why are using ACL 140 in route-map 40 ?

Regards.

Alain.

[Marwan ALshawi]

if you just use it as fall back or for any other traffic then just use set interface instead of set ip next hop

HTH