HSRP/GLBP and IP SLA Help Please

[primeaum]

Okay, I'll try to give a good overview of my situation.
What I have going on is 2 different ISP's, with ISP managed routers, each connected to an ASA5505, each connected to a Cisco 2811 router (they are connected to each other as well)
Right now I have glbp going on, but i'm not sure if its setup correctly. Also, I need to track an IP (basically, any IP outside, I wanted to use the provider's IP) to switch over default routes...does this make sense?
Well, things work great when i unplug an ASA or Router, but if the internet stops working on ISP 1 it doesn't seem to failover to ISP 2...This is important because I have 2 VPN tunnels running over each ISP for redundant links.

Right now I have it tracking the reachability. I've read some other things about running a ping using IP SLA? I'm unfamiliar with this...any help would be great.

Anyhow, I really need help finalizing this configuration. I can post if needed, let me know. Thanks in advance.

 

[North323]

post configs of your devices

 

[primeaum]

Okay...
Also, I'm using OSPF if that matters...

Router 1

track 1 ip route xxx.xxx.xxx.xxx 255.255.255.255 reachability

interface FastEthernet0/0
no ip address
no ip redirects
no ip proxy-arp
ip route-cache flow
ip tcp adjust-mss 1360
duplex auto
speed auto
no cdp enable
no mop enabled
!
interface FastEthernet0/0.1
description NETWORK1
encapsulation dot1Q 9
ip address 10.128.132.10 255.255.255.0
no ip redirects
no ip proxy-arp
ip nat inside
ip virtual-reassembly
glbp 10 ip 10.128.132.1
glbp 10 priority 95
glbp 10 preempt delay minimum 30
glbp 10 weighting 100 lower 90
glbp 10 authentication md5 key-chain xxxxxx
glbp 10 weighting track 1
!
interface FastEthernet0/0.2
description NETWORK2
encapsulation dot1Q 10
ip address 192.168.9.135 255.255.255.128
ip access-group 110 in
no ip redirects
no ip proxy-arp
ip nat inside
ip virtual-reassembly
glbp 11 ip 192.168.9.129
glbp 11 priority 95
glbp 11 preempt delay minimum 30
glbp 11 weighting 100 lower 90
glbp 11 authentication md5 key-chain xxxxxx
glbp 11 weighting track 1 decrement 11

interface FastEthernet0/1
description To ASA5505-1 (ISP1)
ip address 192.168.51.2 255.255.255.248
no ip redirects
no ip proxy-arp
ip virtual-reassembly
ip route-cache flow
duplex auto
speed auto
no cdp enable
no mop enabled

interface FastEthernet0/1/0
description Standby to Router 2
ip address 192.168.0.102 255.255.255.252
duplex auto
speed auto


Router 2

track 1 ip route xxx.xxx.xx.xxx 255.255.255.255 reachability

interface FastEthernet0/0
no ip address
no ip redirects
no ip proxy-arp
ip route-cache flow
ip tcp adjust-mss 1360
duplex auto
speed auto
no cdp enable
no mop enabled
!
interface FastEthernet0/0.1
description NETWORK1
encapsulation dot1Q 9
ip address 10.128.132.9 255.255.255.0
no ip proxy-arp
ip virtual-reassembly
glbp 10 ip 10.128.132.1
glbp 10 priority 10
glbp 10 preempt
glbp 10 weighting 100 lower 90
glbp 10 authentication md5 key-chain xxxxxx
glbp 10 weighting track 1
!
interface FastEthernet0/0.2
description NETWORK2
bandwidth 1536
encapsulation dot1Q 10
ip address 192.168.9.132 255.255.255.128
ip access-group 110 in
ip verify unicast reverse-path
no ip redirects
no ip proxy-arp
ip nat inside
ip virtual-reassembly
glbp 11 ip 192.168.9.129
glbp 11 priority 10
glbp 11 preempt delay minimum 30
glbp 11 weighting 100 lower 90
glbp 11 authentication md5 key-chain xxxxxxx
glbp 11 weighting track 1 decrement 11

interface FastEthernet0/1
description To ASA5505-2 (ISP2)
ip address 192.168.50.2 255.255.255.248
no ip redirects
no ip proxy-arp
ip virtual-reassembly
ip route-cache flow
duplex auto
speed auto
no cdp enable
no mop enabled
!
interface FastEthernet0/0/0
description Standby Line to Router 1
ip address 192.168.0.101 255.255.255.252
duplex full
speed auto



Do you need to see the ASA configurations too?
thanks again!

 

[unclerico]

a topology drawing with all devices in question would be helpful. complete configs of the devices would also be very helpful (attach them as text files using box.net or some other public file sharing site). once we see all of this then we can help you build your solution properly.

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)