Dear friends,    I have ISP kind of setup, in which monitoring the customer network infra- Setup is like- 1. Monitoring servers-> Monitoring VRF-> Customer VRF->CPE loopback IP. 2. We monitor unique loopback IPs (assigned by us) of CPEs, because many customers can share same WAN IPs in different VRFs. 3. If we have one WAN interface connectivity, then no problem in monitoring. When monitoring server sense loopback is down, means WAN interface is down. 4. But when we have 2 WAN interfaces on same router, even if one is down, loopback will be up and monitoring servers won't able to track the other circuit down status. If someone can help me to get the solution for this, would be a grate help. Thanks in advance. ... View more

I am posting an article for circuit redundancy used in working scenario. Router is Cisco 1841 with IOS image c1841-spservicesk9-mz.124-15.T12.bin. Router has three Fast Ethernet interfaces, each one for ISP1, ISP2 and customer LAN. Router is connected with two Internet circuits. Primary as internet lease line (ILL) with static IP and Tunnel config and NATed with IP POOL connected to ISP1. Backup as PPPOE broadband with dynamic IP address connected to ISP2. Router#sh run Building configuration... Current configuration : 2653 bytes ! version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname Router ! boot-start-marker boot-end-marker ! enable password XXXXXXX ! no aaa new-model dot11 syslog ip cef ! ! no ip dhcp use vrf connected ip dhcp excluded-address 192.168.1.1 ip dhcp excluded-address 192.168.1.X ! ip dhcp pool Customer_LAN    network 192.168.1.0 255.255.255.0    default-router 192.168.1.1    dns-server 218.248.x.x 203.124.16.x.x    lease 2 ! ! ip name-server 203.124.x.x ip name-server 218.248.x.x multilink bundle-name authenticated vpdn enable ! vpdn-group 1 request-dialin   protocol pppoe l2tp tunnel receive-window 1024 ! ! ! ! archive log config   hidekeys ! ! ! track 1 rtr 1 reachability ! ! bba-group pppoe global ! ! interface Tunnel1 description ISP1 - Tunnel ip address 10.x.x.4 255.255.255.252 ip nat outside ip virtual-reassembly tunnel source 71.x.x.2 tunnel destination 71.x.x.10 ! interface FastEthernet0/0 description ISP1 - Internet lease line ip address 71.x.x.2 255.255.255.0 duplex auto speed auto ! interface FastEthernet0/1 description ISP2 DSL interface for Internet no ip address ip virtual-reassembly duplex auto speed auto pppoe enable group global pppoe-client dial-pool-number 1 ! interface FastEthernet0/0/0 description Customer LAN ip address 110.x.x.205 255.255.255.0 secondary ip address 192.168.1.1 255.255.255.0 ip nat inside ip virtual-reassembly duplex auto speed auto ! interface Dialer1 ip address negotiated ip mtu 1492 ip nat outside ip virtual-reassembly encapsulation ppp dialer pool 1 dialer-group 1 no cdp enable ppp authentication chap callin ppp chap hostname xxxxxxx (username given by ISP) ppp chap password 0 xxxxxxxxx (Password given by ISP) ! ip forward-protocol nd ip route 0.0.0.0 0.0.0.0 Tunnel1 track 1 ip route 71.0.0.0 255.0.0.0 71.x.x.1 track 1 ip route 0.0.0.0 0.0.0.0 Dialer1 200 ! ! ip http server no ip http secure-server ip nat pool ISP1-Pool 110.x.x.205 110.x.x.205 netmask 255.255.255.0 ip nat inside source route-map ISP1-NAT pool ISP1-Pool overload ip nat inside source route-map ISP2-NAT interface Dialer1 overload ! ip sla 1 icmp-echo 71.x.x.1 source-interface FastEthernet0/0 timeout 1000 threshold 40 frequency 3 ip sla schedule 1 life forever start-time now ! access-list 1 permit 192.168.1.0 0.0.0.255 ! no cdp run ! route-map ISP1-NAT permit 10 match ip address 1 set interface FastEthernet0/0 ! route-map ISP2-NAT permit 10 match ip address 1 match interface Dialer1 ! ! ! ! control-plane ! ! ! line con 0 line aux 0 line vty 0 4 password XXXXXX login ! scheduler allocate 20000 1000 end Router#sh ver Cisco IOS Software, 1841 Software (C1841-SPSERVICESK9-M), Version 12.4(15)T12, RELEASE SOFTWARE (fc3) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2010 by Cisco Systems, Inc. Compiled Fri 22-Jan-10 00:40 by prod_rel_team ROM: System Bootstrap, Version 12.4(13r)T, RELEASE SOFTWARE (fc1) Router uptime is 17 hours, 21 minutes System returned to ROM by reload at 11:24:31 UTC Mon Oct 11 2010 System image file is "flash:c1841-spservicesk9-mz.124-15.T12.bin" This product contains cryptographic features and is subject to United States and local country laws governing import, export, transfer and use. Delivery of Cisco cryptographic products does not imply third-party authority to import, export, distribute or use encryption. Importers, exporters, distributors and users are responsible for compliance with U.S. and local country laws. By using this product you agree to comply with applicable laws and regulations. If you are unable to comply with U.S. and local laws, return this product immediately. A summary of U.S. laws governing Cisco cryptographic products may be found at: http://www.cisco.com/wwl/export/crypto/tool/stqrg.html If you require further assistance please contact us by sending email to export@cisco.com. Cisco 1841 (revision 7.0) with 235520K/26624K bytes of memory. Processor board ID FHKXXXXXXXX 3 FastEthernet interfaces DRAM configuration is 64 bits wide with parity disabled. 191K bytes of NVRAM. 62720K bytes of ATA CompactFlash (Read/Write) Configuration register is 0x2102 Router# ... View more

I am posting an article for circuit redundancy used in working scenario. Cisco ASA 5505 - Version 8.2(1). ASA's three Fast Ethernet interfaces have been connected, each one for ISP1, ISP2 and customer LAN. ASA is connected with two Internet circuits. Primary as internet lease line (ILL) with static IP connected to ISP1. Backup as PPPOE broadband with dynamic IP address connected to ISP2. You can configure both circuits to work in Primary/backup mode using Cisco SLA monitor services and static route. : Saved : ASA Version 8.2(1) ! hostname ASA5505 enable password XXXXXX encrypted passwd XXXXXXX encrypted names ! interface Vlan1 nameif inside security-level 100 ip address 192.168.1.1 255.255.255.0 ! interface Vlan2 nameif outside security-level 0 ip address 115.X.X.2 255.255.255.252 ! interface Vlan3 nameif bsnl-backup security-level 1 pppoe client vpdn group BSNL_Backup pppoe client route distance 200 ip address pppoe setroute ! interface Ethernet0/0 switchport access vlan 2 ! interface Ethernet0/1 ! interface Ethernet0/2 switchport access vlan 3 ! interface Ethernet0/3 ! interface Ethernet0/4 ! interface Ethernet0/5 ! interface Ethernet0/6 ! interface Ethernet0/7 ! boot system disk0:/asa821-k8.bin ftp mode passive clock timezone IST 5 30 object-group service DM_INLINE_SERVICE_1 service-object icmp service-object udp service-object tcp service-object tcp eq ftp service-object tcp eq www service-object tcp eq https service-object tcp eq pop3 service-object tcp eq smtp service-object tcp eq ssh service-object udp eq www service-object ip service-object udp eq ntp service-object icmp echo service-object icmp echo-reply service-object udp eq echo service-object icmp traceroute object-group service test service-object ip service-object icmp service-object pim service-object pcp service-object snp service-object udp service-object igmp service-object ipinip service-object gre service-object esp service-object ah service-object icmp6 service-object tcp service-object eigrp service-object ospf service-object igrp service-object nos service-object icmp alternate-address service-object icmp conversion-error service-object icmp echo service-object icmp echo-reply service-object icmp information-reply service-object icmp information-request service-object icmp mask-reply service-object icmp mask-request service-object icmp mobile-redirect service-object icmp parameter-problem service-object icmp redirect service-object icmp router-advertisement service-object icmp router-solicitation service-object icmp source-quench service-object icmp time-exceeded service-object icmp timestamp-reply service-object icmp timestamp-request service-object icmp traceroute service-object icmp unreachable service-object icmp6 echo service-object icmp6 echo-reply service-object icmp6 membership-query service-object icmp6 membership-reduction service-object icmp6 membership-report service-object icmp6 neighbor-advertisement service-object icmp6 neighbor-redirect service-object icmp6 neighbor-solicitation service-object icmp6 packet-too-big service-object icmp6 parameter-problem service-object icmp6 router-advertisement service-object icmp6 router-renumbering service-object icmp6 router-solicitation service-object icmp6 time-exceeded service-object icmp6 unreachable service-object tcp-udp eq cifs service-object tcp-udp eq discard service-object tcp-udp eq domain service-object tcp-udp eq echo service-object tcp-udp eq www service-object tcp-udp eq kerberos service-object tcp-udp eq nfs service-object tcp-udp eq pim-auto-rp service-object tcp-udp eq sip service-object tcp-udp eq sunrpc service-object tcp-udp eq tacacs service-object tcp-udp eq talk service-object tcp eq aol service-object tcp eq bgp service-object tcp eq chargen service-object tcp eq cifs service-object tcp eq citrix-ica service-object tcp eq ctiqbe service-object tcp eq daytime service-object tcp eq discard service-object tcp eq domain service-object tcp eq echo service-object tcp eq exec service-object tcp eq finger service-object tcp eq ftp service-object tcp eq ftp-data service-object tcp eq gopher service-object tcp eq h323 service-object tcp eq hostname service-object tcp eq www service-object tcp eq https service-object tcp eq ident service-object tcp eq imap4 service-object tcp eq irc service-object tcp eq kerberos service-object tcp eq klogin service-object tcp eq kshell service-object tcp eq ldap service-object tcp eq ldaps service-object tcp eq login service-object tcp eq lotusnotes service-object tcp eq lpd service-object tcp eq netbios-ssn service-object tcp eq nfs service-object tcp eq nntp service-object tcp eq pcanywhere-data service-object tcp eq pim-auto-rp service-object tcp eq pop2 service-object tcp eq pop3 service-object tcp eq pptp service-object tcp eq rsh service-object tcp eq rtsp service-object tcp eq sip service-object tcp eq smtp service-object tcp eq sqlnet service-object tcp eq ssh service-object tcp eq sunrpc service-object tcp eq tacacs service-object tcp eq talk service-object tcp eq telnet service-object tcp eq uucp service-object tcp eq whois service-object udp eq biff service-object udp eq bootpc service-object udp eq bootps service-object udp eq cifs service-object udp eq discard service-object udp eq dnsix service-object udp eq domain service-object udp eq echo service-object udp eq www service-object udp eq isakmp service-object udp eq kerberos service-object udp eq mobile-ip service-object udp eq nameserver service-object udp eq netbios-dgm service-object udp eq netbios-ns service-object udp eq nfs service-object udp eq ntp service-object udp eq pcanywhere-status service-object udp eq pim-auto-rp service-object udp eq radius service-object udp eq radius-acct service-object udp eq rip service-object udp eq secureid-udp service-object udp eq sip service-object udp eq snmp service-object udp eq snmptrap service-object udp eq sunrpc service-object udp eq syslog service-object udp eq tacacs service-object udp eq talk service-object udp eq tftp service-object udp eq time service-object udp eq who service-object udp eq xdmcp access-list inside_access_in extended permit object-group DM_INLINE_SERVICE_1 192.168.1.0 255.255.255.0 any access-list inside_nat_outbound extended permit ip 192.168.1.0 255.255.255.0 any pager lines 24 logging asdm informational mtu inside 1500 mtu outside 1500 mtu bsnl-backup 1494 no failover icmp unreachable rate-limit 1 burst-size 1 no asdm history enable arp timeout 14400 global (outside) 1 interface global (bsnl-backup) 1 interface nat (inside) 1 access-list inside_nat_outbound access-group inside_access_in in interface inside route outside 0.0.0.0 0.0.0.0 115.x.x.1 1 track 1 timeout xlate 3:00:00 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02 timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00 timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00 timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute timeout tcp-proxy-reassembly 0:01:00 dynamic-access-policy-record DfltAccessPolicy http server enable http 192.168.1.0 255.255.255.0 inside no snmp-server location no snmp-server contact snmp-server enable traps snmp authentication linkup linkdown coldstart sla monitor 1 type echo protocol ipIcmpEcho 115.x.x.1 interface outside timeout 3000 frequency 10 sla monitor schedule 1 life forever start-time now crypto ipsec security-association lifetime seconds 28800 crypto ipsec security-association lifetime kilobytes 4608000 ! track 1 rtr 1 reachability telnet timeout 5 ssh timeout 5 console timeout 0 vpdn group BSNL_Backup request dialout pppoe vpdn group BSNL_Backup localname xxxxxxx (hostname/username given by ISP) vpdn group BSNL_Backup ppp authentication chap vpdn username xxxxxxx password *********  ((hostname/username given by ISP)) dhcpd dns 202.x.x.1 202.x.x.2 dhcpd auto_config outside ! dhcpd address 192.168.1.10-192.168.1.254 inside dhcpd enable inside ! threat-detection basic-threat threat-detection statistics access-list no threat-detection statistics tcp-intercept webvpn username admin password xxxxxxxxx encrypted ! class-map global-class match default-inspection-traffic ! ! policy-map global_policy policy-map global-policy class global-class   inspect dns   inspect ftp   inspect http   inspect icmp   inspect icmp error   inspect netbios   inspect rsh   inspect rtsp   inspect sip   inspect snmp   inspect tftp ! service-policy global-policy global prompt hostname context Cryptochecksum:cf3669d79549fb6b79e3bdd155d4c018 : end ... View more

I am posting an article for circuit redundancy used in working scenario. Router is Cisco 1841 with IOS image c1841-spservicesk9-mz.124-15.T12.bin. Router has three Fast Ethernet interfaces, each one for ISP1, ISP2 and customer LAN. Router is connected with two Internet circuits. Primary as internet lease line (ILL) with static IP connected to ISP1. Backup as PPPOE broadband with dynamic IP address connected to ISP2. You can configure both circuits to work in Primary/backup mode using Cisco SLA monitor services and static route. Below is the Router's config:- ======================= Router#sh run Building configuration... Current configuration : 2421 bytes ! version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname Router ! boot-start-marker boot-end-marker ! enable password XXXXXXX ! no aaa new-model dot11 syslog ip cef ! ! no ip dhcp use vrf connected ip dhcp excluded-address 192.168.1.X ! ip dhcp pool Customer_LAN    network 192.168.1.0 255.255.255.0    default-router 192.168.1.1    dns-server 218.X.X.X 203.X.X.X    lease 2 ! ! ip name-server 203.124.X.X ip name-server 218.248.X.X multilink bundle-name authenticated vpdn enable ! vpdn-group 1 request-dialin   protocol pppoe l2tp tunnel receive-window 1024 ! ! ! ! ! archive log config   hidekeys ! ! ! track 1 rtr 1 reachability ! ! bba-group pppoe global ! ! interface FastEthernet0/0 description ISP1- Internet Lease Line ip address 71.X.X.2 255.255.255.0 ip nat outside duplex auto speed auto ! interface FastEthernet0/1 description ISP2- DSL Broadband for Internet no ip address ip virtual-reassembly duplex auto speed auto pppoe enable group global pppoe-client dial-pool-number 1 ! interface FastEthernet0/0/0 description Customer_LAN ip address 192.168.1.1 255.255.255.0 ip nat inside ip virtual-reassembly duplex auto speed auto ! interface Dialer1 ip address negotiated ip mtu 1492 ip nat outside ip virtual-reassembly encapsulation ppp dialer pool 1 dialer-group 1 no cdp enable ppp authentication chap callin ppp chap hostname XXXXXXX (Hostname/Username given by ISP) ppp chap password 0 XXXXX  (Password given by ISP) ! ip forward-protocol nd ip route 0.0.0.0 0.0.0.0 71.X.X.1 track 1 ip route 0.0.0.0 0.0.0.0 Dialer1 200 ! ! ip http server no ip http secure-server ! ip nat inside source route-map ISP1-NAT interface FastEthernet0/0 overload ip nat inside source route-map ISP2-NAT interface Dialer1 overload ! ip sla 1 icmp-echo 71.X.X.1 source-interface FastEthernet0/0 timeout 1000 threshold 40 frequency 3 ip sla schedule 1 life forever start-time now ! access-list 1 permit 192.168.1.0 0.0.0.255 ! no cdp run ! route-map ISP1-NAT permit 10 match ip address 1 set interface FastEthernet0/0 ! route-map ISP2-NAT permit 10 match ip address 1 match interface Dialer1 ! control-plane ! ! ! line con 0 line aux 0 line vty 0 4 password XXXXXXX login ! scheduler allocate 20000 1000 end Router# Router#sh ver Cisco IOS Software, 1841 Software (C1841-SPSERVICESK9-M), Version 12.4(15)T12, RELEASE SOFTWARE (fc3) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2010 by Cisco Systems, Inc. Compiled Fri 22-Jan-10 00:40 by prod_rel_team ROM: System Bootstrap, Version 12.4(13r)T, RELEASE SOFTWARE (fc1) Router uptime is 17 hours, 21 minutes System returned to ROM by reload at 11:24:31 UTC Mon Oct 11 2010 System image file is "flash:c1841-spservicesk9-mz.124-15.T12.bin" This product contains cryptographic features and is subject to United States and local country laws governing import, export, transfer and use. Delivery of Cisco cryptographic products does not imply third-party authority to import, export, distribute or use encryption. Importers, exporters, distributors and users are responsible for compliance with U.S. and local country laws. By using this product you agree to comply with applicable laws and regulations. If you are unable to comply with U.S. and local laws, return this product immediately. A summary of U.S. laws governing Cisco cryptographic products may be found at: http://www.cisco.com/wwl/export/crypto/tool/stqrg.html If you require further assistance please contact us by sending email to export@cisco.com. Cisco 1841 (revision 7.0) with 235520K/26624K bytes of memory. Processor board ID FHKXXXXXXXX 3 FastEthernet interfaces DRAM configuration is 64 bits wide with parity disabled. 191K bytes of NVRAM. 62720K bytes of ATA CompactFlash (Read/Write) Configuration register is 0x2102 Router# ... View more