Route VLAN out of second Dialer IP

[WonderfulIT]

Hi all,

I've got an FTTC connection on Dialer 1 which works fine but that line has 3 public IP's with it, let's say 100.100.100.100, 100.100.100.101 and 100.100.100.102 and i've added the dialer with the IP of 100.100.100.100 and then 101 as a secondary IP.

I've got a VLAN 10 801Q on the LAN interface for another company within our building. The normal LAN is on 192.168.0.0 and this VLAN is on 10.10.10.0 and i want to router all traffic from 10.10.10.0 out of the dialer interface but using the seconday public ip of 100.100.100.101 ?

How do i do this ?

Thanks

[paul driver]

Hello

It seems possible if I am visualizing your network correctly however an you post a simple topology for validation and maybe the configuration of you rtr.

[Georg Pauwen]

Hello,

you could create a NAT pool with the secondary IP address and link your Vllan 10 IP address space to that pool. This would look like below:

ip dhcp excluded-address 10.10.10.1
ip dhcp excluded-address 192.168.0.1
!
ip dhcp pool LAN
network 192.168.0.0 255.255.255.0
default-router 192.168.0.1
!
ip dhcp pool VLAN10
network 10.10.10.0 255.255.255.0
default-router 10.10.10.1
!
interface GigabitEthernet0/0
ip address 192.168.0.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
duplex auto
speed auto
!
interface GigabitEthernet0/0.10
encapsulation dot1Q 10
ip address 10.10.10.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
interface GigabitEthernet0/1
ip address 100.100.100.2 255.255.255.0 secondary
ip address 100.100.100.1 255.255.255.0
ip nat outside
!
ip nat pool PRIMARY 100.100.100.1 100.100.100.1 netmask 255.255.255.0
ip nat pool SECONDARY 100.100.100.2 100.100.100.2 netmask 255.255.255.0
ip nat inside source list 1 pool PRIMARY overload
ip nat inside source list 2 pool SECONDARY overload
ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/1
!
access-list 1 permit 192.168.0.0 0.0.0.255
access-list 2 permit 10.10.10.0 0.0.0.255