Policy Based Routing with 2 providers

Policy Based Routing with 2 providers

NewsGroups | Search | Tools
 comp.dcom.sys.cisco  Post an article  get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content  add this group's latest topics to your Google content  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
Policy Based Routing with 2 providers AXJ 04-18-2008
Posted by AXJ on April 18, 2008, 1:12 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi

We have a IOS router with 2 service providers (DSL and T1).

We would like to send all outbound traffic from internal server 10.10.10.111
via DSL link. There is also static NAT to this server, therefore responses
to inbound requests need to be sent via the DSL link too.

Do I need to use PBR? If so, here is what I am thinking....

------------------
ip nat inside source static 10.10.10.11 64.205.63.100 extendable

interface Vlan101
description to DSL modem
ip address 64.205.63.99 255.255.255.248
ip policy route-map map_dsl1_out
ip nat outside
ip virtual-reassembly

ip access-list standard acl_dsl1_Out
permit 10.10.10.11

route-map map_dsl1_out permit 10
match ip address acl_dsl1_Out
set <command missing>

--------------------------------------

What am I missing? Thanks.

AXJ



Pure Networks
Posted by Barry Margolin on April 18, 2008, 8:29 am
If you were  Registered and logged in, you could reply and use other advanced thread options

> Hi
>
> We have a IOS router with 2 service providers (DSL and T1).
>
> We would like to send all outbound traffic from internal server 10.10.10.111
> via DSL link. There is also static NAT to this server, therefore responses
> to inbound requests need to be sent via the DSL link too.
>
> Do I need to use PBR? If so, here is what I am thinking....
>
> ------------------
> ip nat inside source static 10.10.10.11 64.205.63.100 extendable
>
> interface Vlan101
> description to DSL modem
> ip address 64.205.63.99 255.255.255.248
> ip policy route-map map_dsl1_out
> ip nat outside
> ip virtual-reassembly
>
> ip access-list standard acl_dsl1_Out
> permit 10.10.10.11
>
> route-map map_dsl1_out permit 10
> match ip address acl_dsl1_Out
> set <command missing>
>
> --------------------------------------
>
> What am I missing? Thanks.
>
> AXJ

Te "ip policy" statement has to be put on the LAN interface that
connects to the server.

In the route-map, the command you're missing is "set next-hop
64.205.63.x", where 64.205.63.99 is the other end of the DSL connection.

--
Barry Margolin, barmar@alum.mit.edu
Arlington, MA
*** PLEASE post questions in newsgroups, not directly to me ***
*** PLEASE don't copy me on replies, I'll read them in the group ***

Posted by FortuneCookie on April 18, 2008, 5:27 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Thanks, Barry. According to your suggestion. Here is my changes. In
this case, is the routing table (ip route command) ignored by the IOS?
Thanks.

-------------------------------------------------------------------------------
ip nat inside source static 10.10.10.11 64.205.63.100 extendable

ip access-list standard acl_dsl1_Out
permit 10.10.10.11

route-map map_dsl1_out permit 10
match ip address acl_dsl1_Out
set next-hop 64.205.63.98

interface Vlan101
description to DSL modem 64.205.63.98
ip address 64.205.63.99 255.255.255.248
ip nat outside

interface FastEthernet0/1
description Internal Corporate Net
ip address 10.10.10.1 255.255.255.0
ip nat inside
ip policy route-map map_dsl1_out
-----------------------------------------------------------------------------------------------

Posted by on April 20, 2008, 8:43 am
If you were  Registered and logged in, you could reply and use other advanced thread options
> Thanks, Barry. According to your suggestion. Here is my changes. In
> this case, is the routing table (ip route command) ignored by the IOS?
> Thanks.
>
> --------------------------------------------------------------------------=
-=AD----
> ip nat inside source static 10.10.10.11 64.205.63.100 extendable
>
> ip access-list standard acl_dsl1_Out
> =A0permit 10.10.10.11
>
> route-map map_dsl1_out permit 10
> =A0match ip address acl_dsl1_Out
> =A0set next-hop =A064.205.63.98
>
> interface Vlan101
> =A0description to DSL modem 64.205.63.98
> =A0ip address 64.205.63.99 255.255.255.248
> =A0ip nat outside
>
> interface FastEthernet0/1
> =A0description Internal Corporate Net
> =A0ip address 10.10.10.1 255.255.255.0
> =A0ip nat inside
> =A0ip policy route-map map_dsl1_out
> --------------------------------------------------------------------------=
-=AD--------------------

The PBR is considered first and then if that fails
e.g. the output interface is down or the next hop
is not available (perhaps ARP failure)
the routing table is used. I seem to recall that you can
tell PBR to drop the packet instead.
There is a document on CCO but I can't find it right now.
I should know since I recently did an implementation that
depended on the default behaviour which I verified carefully:-)

Similar ThreadsPosted
Policy Base Routing with 2 providers April 18, 2008, 2:45 am
Policy Based Routing April 6, 2005, 9:20 am
PIX 7.0 policy based routing? October 24, 2005, 10:27 pm
policy based routing November 4, 2005, 2:14 am
Policy based routing on a ASA February 2, 2007, 5:03 pm
PIX 525, I think I need Policy-based routing?? April 23, 2007, 9:45 pm
Policy based routing April 30, 2008, 11:30 am
Policy Based Routing and/or NAT May 7, 2008, 8:15 am
policy based routing problem March 22, 2005, 11:03 am
HSRP and Policy based Routing October 26, 2005, 9:12 pm

other useful resources:
The Federal Communications Commission (FCC)
Telecommunications Industry Association
Electronic and Software Security Products and Services
International Telecommunication Union

Custom CGI Perl and PHP programming by 1-Script.com

Contact Us | Privacy Policy
The site map in XML format XML site map