Hi,
We have two Internet connectivity in our office. One is through Leased line and other through Business ADSL line. Right now we are routing the Internet traffic manually for some of the vlans through ADSL and some are through Leased line.with out re-routing entire internet traffic will flow through leased line.hence we put route-map to divert the traffic to ADSL through policy based routing in L3 Core Switch and PATting through the pix.Now when the adsl link down we need to manually remove the subnet from the access-list so that the internet traffic will go through leased line. is there any way through which we can changeover the internet traffic between these line using static routing.
Please find the current setup and configs
Internet Leased line setup:-
================================
LL Modem ----> Internet Leased Router -----> Cisco PIX ---> Cisco Core L3 Switch -----> Users/Servers connected
Business ADSL Setup:-
=============================
ADSL Router -----> Cisco PIX ---> same Cisco Core L3 Switch -----> Users/Servers connected.
L3 -Core Switch
===============
route-map rerouting-vlan102 permit 10
match ip address route-to-adsl
set ip next-hop 10.0.0.138
!
route-map rerouting-vlan102 permit 20
!
route-map rerouting-vlan100 permit 10
match ip address route-to-adsl
set ip next-hop 10.0.0.138
!
route-map rerouting-vlan100 permit 20
!
route-map rerouting-vlan1 permit 10
match ip address route-to-adsl
set ip next-hop 10.0.0.138
interface Vlan100
description Users_local DHCP network: 10.1.100.0/24
ip address 10.1.100.254 255.255.255.0
ip helper-address 10.1.10.1
no ip proxy-arp
no ip route-cache
no ip mroute-cache
ip policy route-map rerouting-vlan100
!
interface Vlan101
description VLAN 101 interface (Users_static)
ip address 10.1.101.254 255.255.255.0
no ip redirects
no ip route-cache
no ip mroute-cache
ip policy route-map rerouting-vlan101
!
interface Vlan102
description Workstation in DEV department (Static net: 10.1.102.0/24)
ip address 10.1.102.254 255.255.255.0
no ip proxy-arp
no ip route-cache
no ip mroute-cache
ip policy route-map rerouting-vlan102
!
interface Vlan103
description Aironet Wireless (10.1.103.0/24)
ip address 10.1.103.254 255.255.255.0
ip helper-address 10.1.10.1
no ip proxy-arp
no ip route-cache
no ip mroute-cache
ip policy route-map rerouting-vlan101
!
interface Vlan104
description AccessControlVLAN
ip address 10.1.104.254 255.255.255.0
!
interface Vlan110
description RO-VLAN
ip address 10.1.110.252 255.255.255.0
ip helper-address 10.1.10.1
!
interface Vlan199
description Satcom Temp Testing VLAN
ip address 10.1.199.254 255.255.255.0
ip policy route-map rerouting-vlan101
!
ip access-list extended route-to-adsl
deny ip any 10.0.0.0 0.255.255.255
deny ip any 192.168.0.0 0.0.255.255
deny ip any 194.177.108.0 0.0.0.255
deny ip any 172.16.0.0 0.15.255.255
deny ip any host 217.17.247.33
deny ip host 10.1.103.237 any
deny ip host 10.1.100.20 any
deny ip host 10.1.103.28 any
deny ip host 10.1.101.160 any
deny ip host 10.1.102.50 any
permit ip host 192.168.101.5 any
permit ip host 10.1.10.25 any
permit ip host 10.1.10.8 any
permit ip 10.1.199.0 0.0.0.255 any
permit ip host 10.1.10.108 any
permit ip host 10.1.110.118 any
permit ip host 10.1.10.64 any
permit ip host 10.1.30.50 any
permit ip host 10.1.40.1 any
permit ip 10.1.200.0 0.0.0.255 any
permit ip host 10.1.10.80 any
permit ip 10.1.101.0 0.0.0.255 any
permit ip 10.1.103.0 0.0.0.255 any
permit ip 10.1.102.0 0.0.0.255 any
permit ip 10.1.100.0 0.0.0.255 any
permit ip host 192.168.101.108 any
permit ip host 10.1.10.7 any
permit ip host 10.1.10.55 any
permit ip host 10.1.110.124 any
permit ip host 10.1.101.145 any
Thanks in advance
Regards,
Shibu
