!
track 10 rtr 10 reachability
delay down 15 up 15
!
track 11 interface FastEthernet4 ip routing
delay down 10 up 10
!
track 12 list boolean and
object 10
object 11
!
track 20 list boolean and
object 12 not
!
no crypto xauth FastEthernet4
no crypto xauth FastEthernet1
!
!
!
!
interface Loopback0
ip address 10.0.3.254 255.255.255.0
!
interface FastEthernet0
description Intrnal LAN
!
interface FastEthernet1
switchport access vlan 2
!
interface FastEthernet2
!
interface FastEthernet3
!
interface FastEthernet4
ip address 192.168.50.30 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat outside
ip virtual-reassembly
ip route-cache flow
no ip mroute-cache
duplex auto
speed auto
timeout absolute 40 0
no snmp trap link-status
no cdp enable
!
interface Vlan1
description internal LAN
ip address 10.100.8.254 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
ip virtual-reassembly
ip route-cache flow
ip tcp adjust-mss 1452
ip policy route-map PBR
no ip mroute-cache
hold-queue 32 in
!
interface Vlan2
description Yauza Telecom
ip address 89.*.*.* 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat outside
ip virtual-reassembly
ip route-cache flow
ip tcp adjust-mss 1452
no ip mroute-cache
timeout absolute 40 0
no snmp trap link-status
!
ip route 0.0.0.0 0.0.0.0 192.168.50.29 track 12
ip route 0.0.0.0 0.0.0.0 89.*.*.1 track 20!
ip nat inside source route-map NAT-Sovintel interface FastEthernet4 overload
ip nat inside source route-map NAT-Yauza interface Vlan2 overload
!
!
ip prefix-list 10 seq 5 permit 0.0.0.0/0
!
ip prefix-list 20 seq 5 permit 0.0.0.0/0
!
!
!
route-map NAT-Yauza permit 10
match ip address NAT_IP
match ip next-hop Yauza
!
route-map redistribure_connected permit 10
match ip address prefix-list 20
!
route-map redistribure_connected permit 20
match ip address prefix-list 10
!
route-map PBR permit 10
match ip address NAT_IP
set ip next-hop verify-availability 89.*.*.1 1 track 12
set ip next-hop verify-availability 192.168.50.29 2 track 20
set ip df 0
!
route-map NAT-Sovintel permit 10
match ip address NAT_IP
match ip next-hop Sovintel
match interface FastEthernet4
!
!
control-plane
ВОТ конф! я тут перемудрил мож ) плиз подскажите AF что надо переписать или дописать ((
