Question:
i have two DSL lines and i WS-C3560X-24T-L m
configured route map NAT-TO-101 to specify address which use Line 1
and route map NAT-TO-102 to use line 2 and
everything is working fine .
but now i want to configure failover for
both lines so i suggest to do this
route-map redirect permit 10
match ip address To-101
set interface Dialer1 Dialer2
!
route-map redirect permit 20
match ip address To-102
set interface Dialer2 Dialer1
but i dunno what to do with the NAT rules ?
if i change NAT rules
ip nat inside source route-map NAT-To-101
interface Dialer1 overload
ip nat inside source route-map NAT-To-102
interface Dialer2 overload
ip nat inside source route-map NAT-To-101
interface Dialer2 overload
ip nat inside source route-map NAT-To-102
interface Dialer1 overload
that will solve the problem
but i don't understand matching nat rules
will be based on interface dialer up or down or not ?
Originial Configuration file :
!
interface GigabitEthernet0/0
description
$ETH-LAN$$ETH-SW-LAUNCH$$INTF-INFO-GE 0/0$
no ip address
duplex auto
speed auto
!
interface GigabitEthernet0/0.52
encapsulation dot1Q 52
ip address 192.168.3.10 255.255.255.0
ip nat inside
ip virtual-reassembly in
ip policy route-map redirect
!
interface GigabitEthernet0/0.55
encapsulation dot1Q 55
ip address 192.168.55.10 255.255.240.0
ip access-group DNS-Guest in
ip nat inside
ip virtual-reassembly in
!
interface GigabitEthernet0/1
description $ES_LAN$
ip address 10.23.200.10 255.255.255.248
ip flow ingress
ip flow egress
duplex auto
speed auto
service-policy input ETH-IN
interface ATM0/1/0
no ip address
ip mtu 1492
ip tcp adjust-mss 1452
no atm ilmi-keepalive
dsl enable-training-log delay 0
pvc 0/35
encapsulation aal5snap
pppoe-client dial-pool-number 1
!
!
interface ATM0/2/0
no ip address
ip mtu 1492
ip tcp adjust-mss 1452
no atm ilmi-keepalive
dsl enable-training-log delay 0
dsl lom 200
pvc 0/35
encapsulation aal5snap
pppoe-client dial-pool-number 2
!
!
interface Dialer1
ip address negotiated
ip mtu 1492
ip nat outside
ip virtual-reassembly in
encapsulation ppp
ip tcp adjust-mss 1452
dialer pool 1
dialer-group 1
ppp authentication pap chap callin
ppp chap hostname xxxxx
ppp chap password 7 xxxxx
ppp pap sent-username xxxxx password 7
xxxxx
!
interface Dialer2
ip address negotiated
ip mtu 1492
ip nat outside
ip virtual-reassembly in
encapsulation ppp
ip tcp adjust-mss 1452
dialer pool 2
dialer-group 2
ppp authentication pap chap callin
ppp chap hostname xxxxx
ppp chap password 7 xxxxx
ppp pap sent-username xxxxx password 7
xxxxx
!
!ip nat inside source route-map NAT-To-101
interface Dialer1 overload
ip nat inside source route-map NAT-To-102
interface Dialer2 overload
ip route 0.0.0.0
0.0.0.0 Dialer1
ip route 0.0.0.0
0.0.0.0 Dialer2
!
ip access-list extended To-101
permit ip host 192.168.3.8 any
ip access-list extended To-102
permit ip host 192.168.55.9 any
permit ip host 192.168.55.8 any
permit ip host 192.168.3.7 any
permit ip 10.23.251.0 0.0.0.127
any
!
route-map redirect permit 10
match ip address To-101
set interface Dialer1
!
route-map redirect permit 20
match ip address To-102
set interface Dialer2
!
route-map NAT-To-101 permit 10
match ip address To-101
set interface Dialer1
route-map NAT-To-102 permit 10
match ip address To-102
set interface Dialer2
Answer:
change these :
route-map To-102 permit 10
match ip address To-102
match interface Dialer2
!
route-map To-101 permit 10
match ip address To-101
match interface Dialer1
To:
route-map To-102 permit 10
match ip address NAT
match interface Dialer2
!
route-map To-101 permit 10
match ip add NAT
match interface Dialer1
ip access-list extended NAT
permit ip 192.168.3.0 0.0.0.255
any
And add an EEM applet that clears the
existing NAT translation when the Dialer2 gets down:
event manager applet CLEARNAT
event syslog pattern
"%LINEPROTO-5-UPDOWN: Line protocol on Interface Dialer.*, changed state
to down"
action 1.0 cli command "enable"
For more WS-C3560X-24T-L news about Price ans Specification, you can click here.
http://www.3anetwork.com/cisco-ws-c3560x-24t-l-price_p44.html
