alovelyparadox
Programmer
I'm setting up nat and failover for the first time.
I have an internal network 10.1.10.0
two isps the primary is the router at 75.149.249.74
the secondary failover router/isp is at 192.168.1.1
WIth the following I cannot ping 75.149.249.74 or access outside.
Please help my head hurts from banging it on the wall.
Router#show start
Using 2012 out of 491512 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
!
resource policy
!
no network-clock-participate slot 1
!
!
ip cef
!
!
ip name-server 75.75.75.75
ip name-server 75.75.76.76
!
voice-card 0
no dspfarm
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface GigabitEthernet0/0
description Primary Link ISP1(comcast)
ip address 75.149.249.73 255.255.255.252
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
media-type rj45
negotiation auto
!
interface GigabitEthernet0/1
description Inside LAN Segment
ip address 10.1.10.1 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
media-type rj45
negotiation auto
!
interface FastEthernet1/0
description Secondary link ISP2(t1)
ip address 192.168.1.254 255.255.255.0
ip nat outside
ip virtual-reassembly
shutdown
duplex auto
speed auto
!
interface FastEthernet1/1
no ip address
shutdown
duplex auto
speed auto
!
interface Group-Async0
physical-layer async
no ip address
encapsulation slip
no group-range
!
ip route 0.0.0.0 0.0.0.0 75.149.249.74
ip route 0.0.0.0 0.0.0.0 192.168.1.1
!
!
ip http server
no ip http secure-server
ip nat inside source route-map isp1 interface GigabitEthernet0/0 overload
ip nat inside source route-map isp2 interface FastEthernet1/0 overload
!
access-list 100 permit ip 10.1.10.0 0.0.0.255 any
!
!
!
route-map isp2static permit 10
match interface FastEthernet1/0
!
route-map isp1static permit 10
match interface GigabitEthernet0/0
!
route-map isp2 permit 10
match ip address 100
match interface FastEthernet1/0
!
route-map isp1 permit 10
match ip address 100
match interface GigabitEthernet0/0
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
stopbits 1
line aux 0
stopbits 1
line vty 0 4
login
!
scheduler allocate 20000 1000
!
webvpn context Default_context
ssl authenticate verify all
!
no inservice
!
!
end
I have an internal network 10.1.10.0
two isps the primary is the router at 75.149.249.74
the secondary failover router/isp is at 192.168.1.1
WIth the following I cannot ping 75.149.249.74 or access outside.
Please help my head hurts from banging it on the wall.
Router#show start
Using 2012 out of 491512 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
!
resource policy
!
no network-clock-participate slot 1
!
!
ip cef
!
!
ip name-server 75.75.75.75
ip name-server 75.75.76.76
!
voice-card 0
no dspfarm
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface GigabitEthernet0/0
description Primary Link ISP1(comcast)
ip address 75.149.249.73 255.255.255.252
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
media-type rj45
negotiation auto
!
interface GigabitEthernet0/1
description Inside LAN Segment
ip address 10.1.10.1 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
media-type rj45
negotiation auto
!
interface FastEthernet1/0
description Secondary link ISP2(t1)
ip address 192.168.1.254 255.255.255.0
ip nat outside
ip virtual-reassembly
shutdown
duplex auto
speed auto
!
interface FastEthernet1/1
no ip address
shutdown
duplex auto
speed auto
!
interface Group-Async0
physical-layer async
no ip address
encapsulation slip
no group-range
!
ip route 0.0.0.0 0.0.0.0 75.149.249.74
ip route 0.0.0.0 0.0.0.0 192.168.1.1
!
!
ip http server
no ip http secure-server
ip nat inside source route-map isp1 interface GigabitEthernet0/0 overload
ip nat inside source route-map isp2 interface FastEthernet1/0 overload
!
access-list 100 permit ip 10.1.10.0 0.0.0.255 any
!
!
!
route-map isp2static permit 10
match interface FastEthernet1/0
!
route-map isp1static permit 10
match interface GigabitEthernet0/0
!
route-map isp2 permit 10
match ip address 100
match interface FastEthernet1/0
!
route-map isp1 permit 10
match ip address 100
match interface GigabitEthernet0/0
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
stopbits 1
line aux 0
stopbits 1
line vty 0 4
login
!
scheduler allocate 20000 1000
!
webvpn context Default_context
ssl authenticate verify all
!
no inservice
!
!
end