Jon this seems to have done the trick.  Thank you very much sir! ... View more

In doing this do I also have to apply this acl to an interface to get it all to work? ... View more

Ok so I just enter the above commands without this... route-map VLAN300 permit 10 match ip address 101 set ip default next-hop 99.99.99.1         <<ISP cable modem/gateway and all should be good correct? ... View more

Jon, It's not a typo...there is one gateway.  I want to use the same gateway just have vlan300 use an different external IP. ... View more

Thanks Jon, So if I remove the 2 acl175 lines and add the following all traffic originating from VLAN300 will be see as coming from my other WAN IP of 99.99.99.5 to anyone on the web correct? interface FastEthernet0/1.4 ip address 10.20.1.1 255.255.255.0 ip policy route-map VLAN300 route-map VLAN300 permit 10 match ip address 101 set ip default next-hop 99.99.99.1         <<ISP cable modem/gateway ip nat pool NAT 99.99.99.5 99.99.99.5 netmask 255.255.255.252 ip nat inside source list 101 pool NAT overload access-list 101 permit ip 10.20.1.0 0.0.0.255 any and you are correct I do not have 99.99.99.5 assigned to any interfaces. ... View more

Hi Milan, I see where this would solve part of the issue however I don't see how this would allow me to use a secondary wan IP as my next hop if there isn't an interface on the router assigned the IP I'd like to use.  If I'm sitting anywhere on the network presently and access the web for any and all services anyone from the outside can see my traffic coming from 99.99.99.2<fake wan IP.   What I'm looking for is to have anything sitting on one of my VLANs(VLAN 300 on subinterface FA0/1.4) that initiates outbound traffic to show the originating as one of my other WAN IPs say 99.99.99.5.   Here is my config which is pertinent to this. interface FastEthernet0/0 description WAN ip address 99.99.99.2 255.255.255.224 ip flow ingress ip nat outside ip virtual-reassembly speed 100 full-duplex ! interface FastEthernet0/1 description COR_LAN ip address 10.1.0.2 255.255.0.0 ip flow ingress ip nat inside ip virtual-reassembly duplex auto speed auto no mop enabled ! interface FastEthernet0/1.1 description GUEST_INT encapsulation dot1Q 100 ip address 10.3.1.254 255.255.255.0 ip access-group 176 in ip flow ingress ip nat inside ip virtual-reassembly ! interface FastEthernet0/1.2 description innRoad_int encapsulation dot1Q 150 ip address 10.10.1.254 255.255.255.0 ip access-group 177 in ip flow ingress ip nat inside ip virtual-reassembly ! interface FastEthernet0/1.3 description FUEL_READ encapsulation dot1Q 200 ip address 10.5.1.254 255.255.255.0 ip access-group 178 in ip nat inside ip virtual-reassembly ! interface FastEthernet0/1.4 description CNW encapsulation dot1Q 300 ip address 10.20.1.1 255.255.255.0 ip access-group 179 in ip nat inside ip virtual-reassembly ! ip default-gateway 99.99.99.1 ip forward-protocol nd ip route 0.0.0.0 0.0.0.0 99.99.99.1 ! ! ip http server ip http access-class 23 ip http authentication local ip http secure-server ip http timeout-policy idle 60 life 86400 requests 10000 ip nat inside source list 175 interface FastEthernet0/0 overload ! access-list 175 deny ip 10.1.0.0 0.0.255.255 10.2.0.0 0.0.255.255 access-list 175 permit ip 10.1.0.0 0.0.255.255 any access-list 175 permit ip 10.3.1.0 0.0.0.255 any access-list 175 permit icmp 10.3.1.0 0.0.0.255 any echo access-list 175 permit ip 10.10.1.0 0.0.0.255 any access-list 175 permit icmp 10.10.1.0 0.0.0.255 any echo access-list 175 permit ip 10.5.1.0 0.0.0.255 any access-list 175 permit icmp 10.5.1.0 0.0.0.255 any echo access-list 175 permit gre any any access-list 175 permit ip 10.20.1.0 0.0.0.255 any access-list 175 permit icmp 10.20.1.0 0.0.0.255 any echo access-list 176 permit ip 10.3.1.0 0.0.0.255 host 10.1.99.99 access-list 176 permit ip 10.3.1.0 0.0.0.255 host 10.1.99.10 access-list 176 permit ip 10.3.1.0 0.0.0.255 host 10.1.40.101 access-list 176 deny ip 10.3.1.0 0.0.0.255 10.1.0.0 0.0.255.255 access-list 176 permit ip 10.3.1.0 0.0.0.255 any access-list 176 permit icmp 10.3.1.0 0.0.0.255 any echo access-list 177 permit ip 10.10.1.0 0.0.0.255 host 10.1.99.99 access-list 177 permit ip 10.10.1.0 0.0.0.255 host 10.1.99.10 access-list 177 permit ip 10.10.1.0 0.0.0.255 host 10.1.40.101 access-list 177 deny ip 10.10.1.0 0.0.0.255 10.1.0.0 0.0.255.255 access-list 177 permit ip 10.10.1.0 0.0.0.255 any access-list 177 permit icmp 10.10.1.0 0.0.0.255 any echo access-list 178 permit ip 10.5.1.0 0.0.0.255 host 10.1.99.99 access-list 178 permit ip 10.5.1.0 0.0.0.255 host 10.1.99.10 access-list 178 permit ip 10.5.1.0 0.0.0.255 host 10.1.99.105 access-list 178 permit ip 10.5.1.0 0.0.0.255 host 10.1.40.101 access-list 178 deny ip 10.5.1.0 0.0.0.255 10.1.0.0 0.0.255.255 access-list 178 permit ip 10.5.1.0 0.0.0.255 any access-list 178 permit icmp 10.5.1.0 0.0.0.255 any echo access-list 179 permit ip 10.20.1.0 0.0.0.255 host 10.1.99.99 access-list 179 permit ip 10.20.1.0 0.0.0.255 host 10.1.99.10 access-list 179 permit ip 10.20.1.0 0.0.0.255 host 10.1.40.101 access-list 179 deny ip 10.20.1.0 0.0.0.255 10.1.0.0 0.0.255.255 access-list 179 permit ip 10.20.1.0 0.0.0.255 any access-list 179 permit icmp 10.20.1.0 0.0.0.255 any echo I hope this clarifies what I'm trying to do. ... View more

I'm looking to do something similar...I have a Cisco 1841 configured as a dhcp server and would like to block any other dhcp servers from the lan.  I recently had a repurposed dsl router that I had configured for use as a wireless AP(disabled dhcp server, wan interface, etc.)  Something(lightning, power surge, or an employee possibly) caused the device to factory reset which in turn re-enabled the internal dhcp server which brought down internet access for all clients depending on dhcp.  Can dhcp snooping be configured to run on the 1841 which should be the only dhcp server on the lan or is this something that can only be handled through a switch config(we have multiple SLM2024 switches spread across this lan and I don't see an option to enable this feature and I don't believe there is a CLI for these switches either?) Thanks, Chris ... View more