Failover configuration between ADSL and V-Sat line

Dear All,

I have a CISCO 2811 router with 2 HWIC and 2 fast ethernet port. One fast ethernet port connected to my CISCO 2960 switch and other Fast ethernet port connected to a V-Sat line.

I configured ADSL line over the both  HWIC card. I have 3 public ip address from these three wan connection (2 ADSL line and 1 V-Sat line). These 3 ip address binded to QDN.(www.xxxx.com). But over ADSL line NAT is done for dialer 0 interface (out going). So when we are telneting with other ip address its not working

Please give some idea to configure fail over between ADSL line and V-Sat line configured on fast ethernet port.

I am putting my my config details below. Please do the needful

User Access Verification

Username: xxxx
Password:

SSBS-BH>en
Password:
SSBS-BH#sh run
Building configuration...

Current configuration : 5137 bytes
!
version 12.4
service config
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname xxxx
!
boot-start-marker
boot-end-marker
!
logging buffered 4096 errors
enable secret 5 $1$2GhK$/RsVo164.YCpuorgtMmuN/
!
aaa new-model
!
!
aaa authentication login xxxx local
aaa authorization network xxxx local
!
!
aaa session-id common
!
!
ip cef
!
!
no ip domain lookup
ip domain name xxxx
!
multilink bundle-name authenticated
!
!
voice-card 0
 no dspfarm
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
crypto pki trustpoint TP-self-signed-3635042122
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-3635042122
 revocation-check none
 rsakeypair TP-self-signed-3635042122
!
!
!
!
crypto isakmp policy 1
 hash md5
 authentication pre-share
 group 2
!
crypto isakmp policy 2
 authentication pre-share
!
crypto isakmp policy 3
 hash md5
 authentication pre-share
crypto isakmp key xxx address 0.0.0.0 0.0.0.0
crypto isakmp keepalive 20
crypto isakmp nat keepalive 20
crypto isakmp client configuration address-pool local abc
!
crypto isakmp client configuration group vpngroupbh
 key xxx
 pool abc
 acl 110
 save-password
!
!
crypto ipsec transform-set setA esp-des esp-md5-hmac
!
crypto dynamic-map mapA 1
 set transform-set setA
!
!
crypto map mapA client authentication list test
crypto map mapA isakmp authorization list vpngroupbh
crypto map mapA client configuration address initiate
crypto map mapA client configuration address respond
crypto map mapA 1 ipsec-isakmp dynamic mapA
!
!
!
username xxx privilege 15 password 0 xxxx
username xxxx privilege 15 secret 5 $1$XC/U$8KikHqij3GQcgY4.J6q4i/
archive
 log config
  hidekeys
!
!
!
!
!
!
interface FastEthernet0/0
 ip address 10.0.0.138 255.0.0.0
 ip nat inside
 ip virtual-reassembly
 duplex auto
 speed auto
!
interface FastEthernet0/1
 ip address 64.110.73.158 255.255.255.248 secondary
 ip address 64.110.73.157 255.255.255.248
 ip nat inside
 ip virtual-reassembly
 duplex auto
 speed auto
!
interface ATM0/0/0
 no ip address
 shutdown
 no atm ilmi-keepalive
 dsl operating-mode auto
!
interface Serial0/1/0
 no ip address
 shutdown
 clock rate 2000000
!
interface ATM0/2/0
 no ip address
 no atm ilmi-keepalive
 dsl operating-mode auto
!
interface ATM0/2/0.1 point-to-point
 no snmp trap link-status
 pvc 8/35
  encapsulation aal5mux ppp dialer
  dialer pool-member 1
 !
!
interface ATM0/3/0
 no ip address
 no atm ilmi-keepalive
 dsl operating-mode auto
!
interface ATM0/3/0.1 point-to-point
 no snmp trap link-status
 pvc 8/35
  encapsulation aal5snap
  protocol ppp dialer
  dialer pool-member 1
 !
!
interface Dialer0
 ip address negotiated
 ip nat outside
 ip virtual-reassembly
 encapsulation ppp
 dialer pool 1
 dialer-group 1
 ppp authentication pap callin
 ppp pap sent-username xxx password 0 xxxx
 crypto map mapA
!
interface Dialer2
 ip address negotiated
 ip nat outside
 ip virtual-reassembly
 encapsulation ppp
 dialer pool 1
 dialer-group 1
 ppp authentication pap callin
 ppp pap sent-username ssb3 password 0 123456
 crypto map mapA
!
ip local pool abc 192.168.10.1 192.168.10.100
ip route 0.0.0.0 0.0.0.0 Dialer0
ip route 0.0.0.0 0.0.0.0 Dialer2 10
ip route 0.0.0.0 0.0.0.0 FastEthernet0/1 20
!
!
ip http server
ip http access-class 23
ip http authentication local
no ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat inside source list 150 interface Dialer0 overload
ip nat inside source static tcp 10.0.0.1 1723 interface Dialer0 1723
ip nat inside source static tcp 10.0.0.1 3389 interface Dialer0 3389
ip nat inside source static tcp 10.0.0.1 80 interface Dialer0 80
ip nat inside source static tcp 10.0.0.1 2121 interface Dialer0 2121
ip nat inside source static tcp 10.0.0.40 21 interface Dialer0 21
ip nat inside source static tcp 10.0.0.40 3007 interface Dialer0 3007
ip nat inside source static tcp 10.0.0.41 22 interface Dialer0 22
ip nat inside source static tcp 10.0.0.41 80 interface Dialer0 8085
ip nat inside source static tcp 10.0.0.41 21 interface Dialer0 2101
ip nat inside source static tcp 10.0.0.12 5995 interface Dialer0 5995
ip nat inside source static tcp 10.0.0.12 3389 interface Dialer0 7200
ip nat inside source static tcp 10.0.0.41 8086 interface Dialer0 8086
ip nat inside source static tcp 192.168.1.200 6789 interface Dialer0 6789
ip nat inside source static tcp 10.0.0.41 1521 interface Dialer0 1521
ip nat inside source static tcp 10.0.0.60 3389 interface Dialer0 7000
!
logging trap critical
logging 10.0.0.1
access-list 23 permit 10.0.0.1
access-list 110 permit ip 10.0.0.0 0.255.255.255 192.168.10.0 0.0.0.255
access-list 110 permit ip 192.168.1.0 0.0.0.255 192.168.10.0 0.0.0.255
access-list 150 deny   ip 192.168.1.0 0.0.0.255 192.168.10.0 0.0.0.255
access-list 150 deny   ip 10.0.0.0 0.255.255.255 192.168.10.0 0.0.0.255
access-list 150 permit ip 10.0.0.0 0.255.255.255 any
dialer-list 1 protocol ip permit
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
 password xxxx
!
scheduler allocate 20000 1000

!
webvpn cef
!
end


Start Free Trial