Routing Question

[npereira]

How could I do this?

What I was inquiring about is how to setup the Cisco 3640 to route traffic comming from one specific Public IP ( the wan interface has 2 Public IP) to route it to a Specific LAN interface. So for visuals :

Public IP 66.46.196.120 \ *********************** -- LAN ETH1 10.1.10.1
| ---- WAN ETH1 **** Cisco 3640 *****
Public IP 66.46.196.121 / *********************** -- LAN ETH2 10.1.11.1

Our Provider has setup round robin on both Public IP address. We have 2 LAN interface for redundancy and to connect to the 2 Trunk Pack Module on the Mediagateway.

I need to find a way to route traffic from a specific destination IP to a specific LAN interface.

can this be done? If so, how?

If all else fails and this can't be done, we'll need to go to a Softswitch scenerio which is 50+ G's which is something i would like to avoid at all cost if i can acheive this with the Cisco 3640 as I just installed 4 of them.

Regards,

NP

 

[UnaBomber]

Can you not use NAT for this?

UnaBomber
ccnp mcse2k

 

[npereira]

I tried, I can t get it to work...

What I need to have a specific Public IP going to a Specific Private IP. I tried using Static 1-to-1 NAT but it's not working.

 

[Cluebird]

Have you tried policy NAT or policy based routing? There isn't enough information to give much better information than that.

 

[npereira]

What information do you need?

It's basicaly all traffic hitting 66.46.196.120 on port 80 and 5060 should be sent to 10.1.10.10 inside.

 

[npereira]

I just tried using PBR as documented and that also is not working.


!
interface FastEthernet0/0
ip address xxx.xxx.xxx.253 255.255.255.0
ip nat outside
ip virtual-reassembly
no ip route-cache
ip policy route-map SIP
speed 100
full-duplex
no mop enabled
!
interface FastEthernet1/0
ip address 10.1.10.1 255.255.255.0
ip nat inside
ip virtual-reassembly
no ip route-cache
duplex auto
speed auto
!
interface FastEthernet1/1
no ip address
no ip route-cache
shutdown
duplex auto
speed auto
!
no ip http server
no ip http secure-server
ip route 0.0.0.0 0.0.0.0 xxx.xxx.xxx.1
!
!
ip nat source list 1 interface FastEthernet0/0 overload
ip nat inside source static tcp 10.1.10.10 80 xxx.xxx.xxx.253 80 extendable
ip nat inside source static udp 10.1.10.10 5060 xxx.xxx.xxx.253 5060 extendable
!
access-list 1 permit 209.5.242.253
access-list 1 permit 10.1.10.0 0.0.0.255
!
!
route-map SIP permit 10
match ip address 1
set interface FastEthernet1/0
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
!
!
end

 

[helpdeskdan]

Try setting ip next hop instead of the int fa1/0 in your route map.