cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
275
Views
0
Helpful
1
Replies

Routing behaviour for direct requests to WAN interfaces

Good Morning everyone

This is my first post here, and i hope not to make mistakes in posting.

I have a problem that is literally killing me since several days. I show you my situation:

 

i have a router with 2 WAN, let's say:

WAN 1 - s0/0/0 - Main connectivity - Public ip 1.1.1.1

WAN 2 - s0/1/0 - Backup connectivity - Public ip 2.2.2.2

 

I also have 2 static routes like:

ip route 0.0.0.0 0.0.0.0 s0/0/0

ip route 0.0.0.0 0.0.0.0 s0/1/0 20

 

I also have additional configuration for route tracking and nat failover that i am omitting because it's not part of the problem: everythings works fine !!

My problems start when i try to ping my secondary interface from outside, from a remote site (for monitoring purposes).

When i try to ping 2.2.2.2, the router receives the packet and then lookup the routing table to select an egress interface.. so it sends the packet back from s0/1/0 (with source addr 2.2.2.2).. and i don't want that this happen, because my isp, on each point-to-point, block (discard) every packet that has not the correct source address.

In short, i wish that everything behind NAT still could use routing table, while all traffic destined to router itself is sent back from receiving interface.

Is it possible ? Has anyone of you step into the same problem before ??

I am googling since days and i cannot find a decent answer for this.

 

Thank you in advance,

Alessandro

 

P.S: i am using this router/IOS version combination, but the problem is the same on others routers (857, 877, ecc..), the only common thing is the ADVSECURITYK9 ios version

Cisco IOS Software, 1841 Software (C1841-ADVSECURITYK9-M), Version 12.4(24)T4, RELEASE SOFTWARE (fc2)

 

1 Reply 1

I managed to solve this problem with a workaround, using PBR !!

But i hate route-maps... i still wonder if there is a more elegant way to do this... some built-in function that permit router-directed requests to go back from receiving interface.

Any suggestion is still really appreciated !! :) :) :)