среда, 26 января 2011 г.

Configuration for 2 ISP links:

track 100 ip sla 100 reachability
delay down 10 up 20

track 101 ip sla 101 reachability
delay down 10 up 20

ip local policy route-map LocalPolicy

ip nat inside source route-map DYN_NAT interface overload
ip nat inside source route-map FAILOVER_NAT interface overload

ip route 0.0.0.0 0.0.0.0 track 100
ip route 0.0.0.0 0.0.0.0 10 track 101
ip route 0.0.0.0 0.0.0.0 250
ip route 0.0.0.0 0.0.0.0 251

ip access-list extended PingISP_A
permit icmp host host 8.8.8.8

ip access-list extended PingISP_B
permit icmp host host 8.8.8.8

ip sla 100
icmp-echo 8.8.8.8 source-interface
ip sla schedule 100 life forever start-time now

ip sla 101
icmp-echo 8.8.8.8 source-interface
ip sla schedule 101 life forever start-time now

access-list 107 permit ip any
access-list 108 permit ip any

route-map FAILOVER_NAT permit 10
match ip address 107
match interface

route-map DYN_NAT permit 10
match ip address 108
match interface

route-map LocalPolicy permit 10
match ip address PingISP_A
set ip next-hop
set interface

route-map LocalPolicy permit 20
match ip address PingISP_B
set ip next-hop
set interface

If you need to do static NAT you would do basically the same thing:

route-map STAT_NAT permit 10
match ip address 109
match interface

route-map FAILOVER_SNAT permit 10
match ip address 110
match interface

Комментариев нет:

Отправить комментарий