04-02-2015 04:50 PM - edited 03-07-2019 11:23 PM
Hi , i got a 2921 , and i am working to configure it as a failover router with 2 ISP , the failover works great , but the computer have not internet , i can ping the gateway , but i cannot ping nothing more , even the IP configured in the other interfaces .
Here is my sh run
Current configuration : 2322 bytes
!
! Last configuration change at 23:43:01 UTC Thu Apr 2 2015
!
version 15.5
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot system flash:c2900-universalk9-mz.SPA.155-1.T.bin
boot-end-marker
!
no aaa new-model
bsd-client server url https://cloudsso.cisco.com/as/token.oauth2
!
ip dhcp pool soporte
network 192.168.100.0 255.255.255.0
dns-server 8.8.8.8
lease 8
!
ip cef
no ipv6 cef
multilink bundle-name authenticated
!
cts logging verbose
!
redundancy
!
track 100 ip sla 100 reachability
delay down 10 up 20
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
description SOPORTE
ip address 192.168.100.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
duplex auto
speed auto
!
interface GigabitEthernet0/1
ip address 10.0.3.100 255.255.255.0
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
interface GigabitEthernet0/2
ip address 192.168.0.100 255.255.255.0
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip nat inside source route-map isp1-primary interface GigabitEthernet0/1 overload
ip nat inside source route-map isp2-backup interface GigabitEthernet0/1 overload
ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/1 10.0.3.1 track 100
ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/2 192.168.0.1 10
!
ip sla 100
icmp-echo 8.8.8.8 source-interface GigabitEthernet0/1
frequency 5
ip sla schedule 100 life forever start-time now
!
route-map isp1-primary permit 10
match ip address 100
match interface GigabitEthernet0/1
!
route-map isp2-backup permit 10
match ip address 100
match interface GigabitEthernet0/2
!
access-list 100 permit ip 192.168.100.0 0.0.0.255 any
!
control-plane
!
line con 0
password xxxxxxxxx
login
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password xxxxxxxxxxxx
login
transport input all
!
scheduler allocate 20000 1000
!
end
Thank you very muchh
04-03-2015 01:26 AM
Your NAT statements seem wrong for ISP2 as ISP2 uses Gig0/2
"ip nat inside source route-map isp2-backup interface GigabitEthernet0/1 overload"
04-06-2015 12:54 PM
Thank you , but this is not the problema ,the configuration is correct now but still no internet .
The failover works , i can ping from the Cisco with any ISP , but all the computers conected have not internet access ..
Thanks
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide