cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
857
Views
0
Helpful
2
Replies

Route- Map with two IPS and two interfaces LAN

kathy-kat
Level 1
Level 1

Hello Everyone!!

I have one router with two conections to IPS´s and two connections to lan, so I think in route-map. but when we did the change, we had some problems with the communication in one of the route.

this is the situation:

1. All the traffic originates 172.17.1.0/24 have to be routed to IPS1, becuase with that provider we have web site and other applications,

2. The rest of teh traffic have to be routed to ISP 2.

Theres is the config:

interface FastEthernet0/0
description Servidor Proxy
ip address 172.17.0.2 255.255.255.0

interface Serial0/0
description Navegacion
bandwidth 2048
no ip address
no ip unreachables

encapsulation frame-relay IETF

interface Serial0/0.245 point-to-point
bandwidth 2048
ip address 192.168.1.2 255.255.255.252
frame-relay interface-dlci 245 IETF

interface FastEthernet0/1
description Servidor Firewall
ip address 172.17.1.1 255.255.255.0
ip policy route-map 311

interface Serial0/1
description Firewall y Portales
bandwidth 1024
no ip address
no ip redirects
no ip unreachables
encapsulation frame-relay IETF
no fair-queue
frame-relay lmi-type ansi

interface Serial0/1.311 point-to-point
bandwidth 1024
ip address 192.168.1.4 255.255.255.252
frame-relay interface-dlci 311 IETF

route-map 311 permit 10
match address 13
set interface Serial0/1.311

access-list 13 permit 172.17.1.0 255.255.255.0

ip classless
ip route 0.0.0.0 0.0.0.0 Serial0/0.245
ip route 0.0.0.0 0.0.0.0 Serial0/1.311

I think that the route-map is not working, because the navigation works fine but the the web site and the others applications can not be access from outside networks.

Any idea??

KC

2 Replies 2

Jon Marshall
Hall of Fame
Hall of Fame

Katherine

Not sure exactly what you mean by access outside. Do you mean your PBR is not working ?

One thing that is definitely wrong is you have -

access-list 13 permit 172.17.1.0 255.255.255.0

that should be -

access-list 13 permit 172.17.1.0 0.0.0.255

Jon

Thanks Jon,

You are right, the wild card it was wrong, referent to access outside, i mean that the user who want to access to web -side can not do it.

Regards,

KC