ROUTE MAP INTERNET ISSUES

[babular051]

Hello,

I am having difficulty with my ROUTE MAP configurations.

The issue is this, we have 2 connections to our ISP. The first ISP is our primary link while the second one serves as the secondary link.

Route Map configurations have been configured and the auto fail over works well when one ISP goes down.

But we want some internet traffic to bypass the routing table and pass through the second ISP even while the first ISP is still up and running.

I found that this isn't possible because the traffic is passing through the first ISP even while using the second ISP's NAT IP.

Please find my configuration below:

interface GigabitEthernet0/0     ---------- ISP1

description ISP1
ip address 41.185.151.7 255.255.255.254
ip nat outside

!
interface GigabitEthernet0/1      --------- ISP2
description ISP2
ip address 105.151.9.17 255.255.255.254
ip nat outside
!

interface Loopback102           --------- PUBLIC IP FROM ISP2
ip address 105.151.5.150 255.255.255.255

LAN INTERFACE

interface GigabitEthernet0/2
ip address 172.16.16.1
ip nat inside
ip policy route-map CISCO

NAT COMMAND FOR THE ROUTE-MAP

ip nat inside source route-map CISCO interface Loopback102 overload

ip route 0.0.0.0    0.0.0.0   41.185.151.7    track 2                  ---------- ISP1

ip route 0.0.0.0    0.0.0.0   105.151.9.17   5                               ---------- ISP2

ip access-list extended FLY
permit ip host 172.16.16.10 any
permit ip host 172.16.16.11 any

route-map CISCO permit 10
match ip address FLY
set ip next-hop 105.151.9.17

IPSLA configs are working fine so they are not posted here 

Even with this, doing a traceroute to google's dns server 8.8.8.8 from the host shows that the internet traffic that is supposed to pass through the second ISP is still passing through the first ISP while the nat IP for the host shows that of ISP2. Please how do i make the traffic to pass through the default route of ISP2 with the higher metric?

Thank you.

[Reza Sharifi · Accepted solution]

Hi,

Have a look at this document with examples and explanations.

https://supportforums.cisco.com/document/32186/dual-internet-links-nating-pbr-and-ip-sla

HTH

[babular051]

Thanks Reza, 

The document was very helpful. I created a default prefix list 0.0.0.0/0 and added to the existing set ip next-hop 105.151.9.17 in the route map statement.

So this acted as a 0.0.0.0   0.0.0.0

ip prefix-list FLY2: 1 entries
seq 5 permit 0.0.0.0/0

Match clauses:
ip address (access-lists): FLY
Set clauses:
ip address (prefix-list) FLY2
ip next-hop 105.151.9.17
Policy routing matches: 8429 packets, 1823263 bytes

Its working fine now.

Thank you so much.

[Reza Sharifi]

Glad to help.

Please rate and mark the post as answered so other members can benefit from it.

Thanks

[Richard Burts · Accepted solution]

There are several things I would comment about.

- you are using the same route map to do both Policy Based Routing and to control NAT. But the syntax of the route map is appropriate to PBR but not for NAT. I suggest that you create a separate route map to use to control NAT.

- you are using the IP address 105.151.9.17 in both your route map and in your static route. But this IP address is also used as the address of your interface. Neither of these statements should point at the interface address but should use the provider address.

HTH

Rick

[babular051]

Thanks, Richard.

All is working fine now.

I created another separate PBR.

I really appreciate your contribution.

Cheers!

[Richard Burts]

I am glad to know that you created a new PBR and that it is working fine now.

HTH

Rick