cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1558
Views
0
Helpful
1
Replies

IP SLA, Tunnels, and static routes

klombard
Level 1
Level 1

Here's the scenario:  1 router will have a primary and secondary ISP connection.  I set up an SLA to track connectivity on the primary connection.  Here are the static routes:

ip route 0.0.0.0 0.0.0.0 Tunnel55 track 10

ip route 12.54.X.X 255.255.255.240 GigabitEthernet0/0 track 10

ip route 12.54.X.Y 255.255.255.255 X.15.115.X track 10

ip route 192.168.32.0 255.255.240.0 Tunnel55 track 10

ip route 192.168.48.0 255.255.252.0 Tunnel55 track 10

ip route 192.168.56.0 255.255.255.0 Tunnel55 track 10

ip route 0.0.0.0 0.0.0.0 Tunnel56 254

ip route 12.54.X.X 255.255.255.240 GigabitEthernet0/1 254

ip route 12.54.X.Y 255.255.255.255 X.15.81.X 254

ip route 192.168.32.0 255.255.240.0 Tunnel56 254

ip route 192.168.48.0 255.255.252.0 Tunnel56 254

ip route 192.168.56.0 255.255.255.0 Tunnel56 254

So I shut down the port (gi0/0) belonging to the primary port.  At this point, it seemed like it worked fine.  The routes shifted over to the backup routes.  However, when I re-enabled the port, only two of the routes switched back. The routes pointing to Tunnels stayed on the secondary tunnel. When I browsed my static routes, I saw this:

Gateway of last resort is 0.0.0.0 to network 0.0.0.0

S*    0.0.0.0/0 is directly connected, Tunnel56

      12.0.0.0/8 is variably subnetted, 2 subnets, 2 masks

S        12.x.x.16/28 is directly connected, GigabitEthernet0/0

S        12.x.y.20/32 [1/0] via x.15.115.x

S     192.168.32.0/20 is directly connected, Tunnel56

S     192.168.48.0/22 is directly connected, Tunnel56

S     192.168.56.0/24 is directly connected, Tunnel56

Is there something special I need to do for Tunnels to allow the Tunnel routes to switch back automatically?

1 Reply 1

Julio Carvajal
VIP Alumni
VIP Alumni

Hello Ken,

I can see you are sending the probe packets to the same object ( using the track ID 10 )

After you bring the interface tunnel up, can you confirm if you can send traffic to that object?

Regards,

Julio

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC