ho una configurazione funzionante con una connessione ADSL + FIBRA su un 1801.
Tramite l'object tracking mi funziona correttamente il passaggio da una parte all'altra
Ecco intanto la configurazione:
Codice: Seleziona tutto
!
track 100 rtr 100 reachability
delay up 10
!
interface Loopback0
description ADSL
ip address 1.1.1.1 255.255.255.248
!
interface Loopback1
ip address 2.2.2.2 255.255.255.248
!
interface FastEthernet0
ip address 10.0.0.1 255.255.255.0
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface ATM0
no ip address
no atm ilmi-keepalive
dsl operating-mode auto
!
interface ATM0.1 point-to-point
ip address 20.0.0.1 255.255.255.252
ip nat outside
ip virtual-reassembly
no snmp trap link-status
pvc 8/35
encapsulation aal5snap
!
!
interface Vlan1
ip address 192.168.0.254 255.255.255.0
ip nat inside
ip virtual-reassembly
!
ip route 0.0.0.0 0.0.0.0 10.0.0.254 10 track 100
ip route 0.0.0.0 0.0.0.0 ATM0.1 254
!
ip nat translation timeout 3600
ip nat translation tcp-timeout 3600
ip nat translation udp-timeout 1200
ip nat translation icmp-timeout 9
ip nat translation max-entries 10000
!
ip nat pool INTERNET-ADSL 1.1.1.1 1.1.1.1 netmask 255.255.255.248
ip nat pool INTERNET-FIBRA 2.2.2.2 2.2.2.2 netmask 255.255.255.248
ip nat inside source route-map ISP1 pool INTERNET-ADSL overload
ip nat inside source route-map ISP2 pool INTERNET-FIBRA overload
ip nat inside source static 192.168.0.253 2.2.2.3 route-map ISP2 extendable
ip nat inside source static 192.168.0.253 1.1.1.2 route-map ISP1 extendable
!
ip sla 100
icmp-echo 10.0.0.254
timeout 500
frequency 3
ip sla schedule 100 life forever start-time now
!
access-list 100 remark * NAVIGAZIONE ADSL
access-list 100 permit ip 192.168.0.0 0.0.0.255 any
access-list 101 remark * REGOLE PER NAVIGARE CON LA FIBRA
access-list 101 permit ip 192.168.0.0 0.0.0.255 any
!
route-map ISP2 permit 10
match ip address 101
match interface FastEthernet0
!
route-map ISP1 permit 10
match ip address 100
match interface ATM0.1
!
Facendo poi
Codice: Seleziona tutto
clear ip nat translation *
Altro problema è che le regole:
Codice: Seleziona tutto
ip nat inside source static 192.168.0.253 2.2.2.3 route-map ISP2 extendable
ip nat inside source static 192.168.0.253 1.1.1.2 route-map ISP1 extendable
Ho provato anche a mettere un DENY nell'access list 100 e 101 per non far nattare quel pc in uscita, ma allora non funziona più e non naviga....
Cosa sbaglio?
Grazie mille a tutti per l'aiuto