>[оверквотинг удален]
> match ip address 190
> set ip next-hop "ISP #2 GW"
>!
>route-map test permit 20
> match ip address 1
> set interface Dialer1
>
>где acl 1 вся сеть, acl 190 адреса которые должны ходить через
>ISP #2
>Ниже конфиг, задача ---- 2 инет канала нужно сделать так что вся сеть выходила через ISP 1, и несколько адресов через ISP 2, + backup при падении одного из каналов все переключается на второго. Маршрутизатор cisco 2811
ip sla monitor 10
type echo protocol ipIcmpEcho ISP1 GW source-interface Dialer1
timeout 2000
threshold 2
frequency 3
ip sla monitor schedule 10 life forever start-time now
ip sla monitor 20
type echo protocol ipIcmpEcho ISP 2 GW source-ipaddr
timeout 2000
threshold 2
frequency 3
ip sla monitor schedule 20 life forever start-time now
!
!
voice-card 0
no dspfarm
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
track 123 rtr 10 reachability
!
track 124 rtr 20 reachability
!
!
!
!
!
interface FastEthernet0/0
description $ETH-LAN$$ETH-SW-LAUNCH$$INTF-INFO-FE 0/0$
ip address 10.10.10.1 255.255.255.248
duplex auto
speed auto
!
interface FastEthernet0/1
description PPPoE
no ip address
duplex auto
speed auto
pppoe enable group global
pppoe-client dial-pool-number 1
!
interface FastEthernet0/0/0
description LAN
switchport access vlan 2
!
interface FastEthernet0/0/1
switchport access vlan 30
!
interface FastEthernet0/0/2
shutdown
!
interface FastEthernet0/0/3
shutdown
!
interface Vlan2
description LAN L3
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly
!
interface Vlan30
ip address MY ISP 2
ip nat outside
ip virtual-reassembly
!
interface Dialer1
mtu 1492
ip address negotiated
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 1
ppp authentication pap callin
ppp pap sent-username password 0
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Dialer1 20 track 123
ip route 0.0.0.0 0.0.0.0 ISP 2 GW 20 track 124
!
!
ip http server
ip http access-class 23
ip http authentication local
no ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat pool Pool2 ISP 2 GW ISP 2 GW netmask
ip nat inside source route-map ISP 1 interface Dialer1 overload
ip nat inside source route-map ISP 2 pool pool2 overload
!
access-list 1 permit 192.168.1.0 0.0.0.255
access-list 10 permit 192.168.1.96
access-list 10 permit 192.168.1.97
dialer-list 1 protocol ip permit
!
route-map tracking permit 10
set ip next-hop verify-availability ISP 2 GW 10 track 124
set interface Dialer1
!
route-map tracking permit 20
set ip next-hop verify-availability ISP 1 GW 10 track 123
set ip next-hop ISP 2 GW
!
route-map test permit 10
match ip address 10
set ip next-hop ISP 2 GW
!
route-map test permit 20
match ip address 1
set interface Dialer1
!
route-map ISP 1 permit 10
match ip address 1
match interface Dialer1
!
route-map ISP 2 permit 10
match ip address 1
match interface Vlan30
!
Буду очень благодарен за помощ...
