877W static route for outgoing email 1

[frenchpeter]

My organisation uses Exchange 2007 as its mail server. Our ADSL service is pretty poor and, each week, virtually dies when invoices are being emailed out in a big batch. This creates grief from the MD when he is trying to work remotely at the same time and cannot connect.

We have a second ADSL service connected to our network and I want to use this for all outgoing emails. I am told that the solution is for the firewall on the Cisco 877W to be configured for a static route for outgoing emails to point to the IP address of the router on the second ADSL service. Does anyone know how this can be done?

 

[unclerico]

Yes, you can do this. It is called PBR or policy-based routing. It goes like this:

access-list 101 permit tcp <email_server_ip> 25 any

route-map PBR_SMTP permit 10
 match ip address 101
 set ip next-hop <adsl2_next_hop_ip>

interface vlan 1
 ip policy route-map PBR_SMTP

I am making the following assumptions: a) you are using SMTP, b) you know your next hop ip address for ADSL2, c) you are using VLAN 1 on the 877W to connect your internal computers to (i.e. it is the default gateway).

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[frenchpeter]

Am I being dense? I passed on the suggested configuration to the people who manage the 877W router and got the following response:-

This configuration is perfectly fine but as we discussed that it won’t work for this particular scenario, if both WAN links are connected to cisco router than I can do this for them, but the 2nd ADSL router is totally separated and cisco router doesn’t have any interface information of that router so that I can pass this specific port (25) traffic to it.

 

[unclerico]

so if i am reading the reply correctly, there is a second router that terminates the second adsl connection. this is pretty simple to get around assuming that you can put the LAN interface of the adsl2 router on the same network as vlan1 on the 877. the set ip next-hop will policy-route the SMTP traffic to the LAN interface of the adsl2 router. this will happen regardless if the next-hop is a directly connected interface or another hop inside.

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)