Leadtheway
asked on
WAN Failover Cisco 2821
I have a Cisco 2821 currently with a Business Class Fiber to copper service, We ordered a DSL connection with Static IP and have a 4esw-HWIC for the 2821, two fold question, how can I set it as a failover for internet and is it possible to just have specific addresses allowed to use it?
ASKER
yeah that seems a little above my paygrade, is there a simple way to possibly just do a failover with a metric or something?
Might be easier with a state full NAT fail over as described here:
http://www.cisco.com/en/US/docs/ios/12_2t/12_2t13/feature/guide/ftsnat.html
However, do you have two WAN ports or are you wanting to use two switch ports? If you don't have two WAN ports this isn't going to work anyway.
http://www.cisco.com/en/US/docs/ios/12_2t/12_2t13/feature/guide/ftsnat.html
However, do you have two WAN ports or are you wanting to use two switch ports? If you don't have two WAN ports this isn't going to work anyway.
ASKER
WAN ports? isn't that determined by configuration, our current interfaces
PCCHMRT02#sh ip int brief
Interface IP-Address OK? Method Status Protocol
GigabitEthernet0/0 96.x.x.242 YES NVRAM up up
GigabitEthernet0/1 192.168.253.25 YES NVRAM up up
FastEthernet0/0/0 unassigned YES unset up down
FastEthernet0/0/1 unassigned YES unset up down
FastEthernet0/0/2 unassigned YES unset up down
FastEthernet0/0/3 unassigned YES unset up up
Vlan1 unassigned YES NVRAM up down
Vlan2 172.31.30.1 YES NVRAM up up
Vlan5 unassigned YES NVRAM administratively down down
Vlan11 10.201.201.1 YES NVRAM up down
NVI0 unassigned NO unset up up
PCCHMRT02#sh ip int brief
Interface IP-Address OK? Method Status Protocol
GigabitEthernet0/0 96.x.x.242 YES NVRAM up up
GigabitEthernet0/1 192.168.253.25 YES NVRAM up up
FastEthernet0/0/0 unassigned YES unset up down
FastEthernet0/0/1 unassigned YES unset up down
FastEthernet0/0/2 unassigned YES unset up down
FastEthernet0/0/3 unassigned YES unset up up
Vlan1 unassigned YES NVRAM up down
Vlan2 172.31.30.1 YES NVRAM up up
Vlan5 unassigned YES NVRAM administratively down down
Vlan11 10.201.201.1 YES NVRAM up down
NVI0 unassigned NO unset up up
You should be ok then. I was just saying that I don't think you can use a switch port as a failover route but I could be wrong....
ASKER
FastEthernet0/0/0 unassigned YES unset up down
FastEthernet0/0/1 unassigned YES unset up down
FastEthernet0/0/2 unassigned YES unset up down
FastEthernet0/0/3 unassigned YES unset up up
these are the ports in the 4esw-hwic, so you are saying I can't use those as a failover?
FastEthernet0/0/1 unassigned YES unset up down
FastEthernet0/0/2 unassigned YES unset up down
FastEthernet0/0/3 unassigned YES unset up up
these are the ports in the 4esw-hwic, so you are saying I can't use those as a failover?
I haven't worked with the 4ESW enough to give you a perfect answer here other than to try it.... However, I don't think that card will allow you to specify HSRP (Hot standby routing protocol) on one of the FastEthernet Interfaces and if it won't then you can't do the NAT fail over with that port. The issue is that Switches are layer two devices and have some layer three characteristics at times. You need a full on layer 3 port that can route IP's through. I'd suggest just trying it and see if it will even allow you to issue the commands.
I agree with @atechnicnate that the 4ESW will not allow HSRP to work as the switch port will make HSRP think it's up all the time.
Since I have nothing to test with I found an old thread that I think fits what you are trying to do.
https://supportforums.cisco.com/thread/1002905
https://supportforums.cisco.com/thread/1002905
ASKER
Can someone tell me definite that it won't work, what if I have an additional 877 to work with, can it work somehow that way?
It won't work with an 877 for sure. You need two non switch ports (layer 3 ports) to make it work properly.
ASKER
i meant using the 877 in conjunction with the 2821 to get it to work, doesn't the 4esw-Hwic support layer 3?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thats the best answer I've seen so far. The links seem helpful, just have to put in place, Just curious, wouldn't you be available via email for some prepaid engineering help. Just to maybe have you answer questions and maybe look over the config? How can I contact you if so?
Thanks
Thanks
Sure. Email me at mbernhardt8-at-comcast-dot -net. I don't think there's a problem with the EE terms of service for this, but I don't want spammers to find me.
ASKER
thanks, I sent you an email
http://www.cisco.com/en/US/tech/tk364/technologies_configuration_example09186a0080211f5c.shtml