|
[x]
Posted via EE Mobile
|
|
| Search, ask, and monitor your questions on the go with EE Mobile. Visit Experts Exchange from your mobile device and never be out of touch again. |
|
|
|
|
Asked by joe90kane in Networking Hardware Firewalls, Cisco PIX Firewall, Network Routers
Hi,
I have two broadband connections,
1x Wireless Broadband connection -- RJ45 connection (BB1)
1x ADSL --> RJ11 connection (BB2)
I have both connected and working but I cant figure out how to use the BB1 connection as the primary and if it goes down to automatically failover to the BB2 connection.
My current config only works for BB2 - if I try to disable int Dialer 1 it blocks everything the Int FastEthernet0/1 doesnt work.
Hope that makes sense.
Thanks, Joe
1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:
53:
54:
55:
56:
57:
58:
59:
60:
61:
62:
63:
64:
65:
66:
67:
68:
69:
70:
71:
72:
73:
74:
75:
76:
77:
78:
79:
80:
81:
82:
83:
84:
85:
86:
87:
88:
89:
90:
91:
92:
93:
94:
95:
96:
97:
98:
99:
100:
101:
102:
103:
104:
105:
106:
107:
108:
109:
110:
111:
112:
113:
114:
115:
116:
117:
118:
119:
120:
121:
122:
123:
124:
125:
126:
127:
128:
129:
130:
131:
132:
133:
134:
135:
136:
137:
138:
139:
140:
|
!
version 12.4
no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname RTR
!
boot-start-marker
boot-end-marker
!
no logging buffered
logging monitor notifications
enable password 7 123123123
!
no aaa new-model
!
resource policy
!
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
ip subnet-zero
ip cef
!
!
no ip dhcp use vrf connected
!
ip dhcp pool tester
import all
network 192.168.4.0 255.255.255.0
default-router 192.168.4.253
dns-server 192.168.1.50 192.168.1.48
netbios-name-server 192.168.1.50
lease 0 2
!
!
ip name-server 91.91.91.91
ip name-server 91.92.92.92
ip name-server 85.85.85.85
ip name-server 85.86.86.86
vpdn enable
!
!
!
!
!
crypto isakmp policy 11
hash md5
authentication pre-share
group 2
crypto isakmp key vpnkey address 80.80.80.80
crypto isakmp key vpnkey address 89.89.89.89
!
!
crypto ipsec transform-set tester esp-des esp-md5-hmac
!
crypto map VPN 11 ipsec-isakmp
set peer 80.80.80.80
set peer 89.89.89.89
set transform-set tester
match address 120
!
!
!
interface FastEthernet0/0
ip address 192.168.4.253 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 91.91.91.91 255.255.255.252
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
crypto map VPN
!
interface ATM0/0/0
no ip address
no atm ilmi-keepalive
dsl operating-mode auto
pvc 8/35
encapsulation aal5snap
pppoe-client dial-pool-number 1
!
!
interface Dialer0
no ip address
!
interface Dialer1
mtu 1492
ip address negotiated
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 1
dialer remote-name redback
dialer-group 1
ppp authentication pap chap callin
ppp chap hostname admin@admin.com
ppp chap password 7 123123123
crypto map VPN
!
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer1
ip route 0.0.0.0 0.0.0.0 FastEthernet0/1 254
!
ip http server
ip http secure-server
ip nat pool BB1VPN 91.91.91.91 91.91.91.91 netmask 255.255.255.255
ip nat pool BB2VPN 213.0.0.0 213.0.0.0 netmask 255.255.255.255
!
access-list 1 permit 192.168.4.0 0.0.0.255
access-list 120 permit ip 192.168.4.0 0.0.0.255 192.168.1.0 0.0.0.255
dialer-list 1 protocol ip permit
route-map nonat permit 10
match ip address 130
!
!
!
control-plane
!
!
line con 0
line aux 0
line vty 0
password 7 123123123
login
line vty 1
password 7 1231231231
login
line vty 2 4
login
!
end
|
20091111-EE-VQP-89 - Hierarchy / EE_QW_3_20080625