1 router 2 ISPs nat to LAN

[plshlpme]

i just browsed through 75 pages in this forum and wasn't able to find exactly what im looking for so ill take a stab at asking a question.

i have a cisco 4500M with the most recent IOS available to it. I have 2 connections to the internet, one is a static connection with no limitations as to which services i run on it, and one is a dhcp connection which i cannot run services such as mail and dns.

i would like to have both wan links go into my router and then nat internally to my lan.

i believe i will have to use a policy route-map but aren't quite sure how to go about it yet.

basically i want to ensure that anything that comes in a certain ISP goes back out that same ISP, but i would also like to force certain services to always use one ISP over the other.

i realize that this is very broad but does anybody have some working experience with this type of setup? or maybe better guidelines of where i should start with this.

thanks

 

[lgarner]

You want your publicly-accessible hosts to route via the "static" isp, and maybe mix other traffic between the two. One example:

access-list 101 permit ip host (mail server) any
access-list 101 permit ip host (web server) any
! also permit one inside lan via this list
access-list 101 permit ip 192.168.1.0 0.0.0.255 any
route-map static-isp permit 101
match ip address 101
set interface s0 (interface to static isp)

access-list 102 permit ip 192.168.2.0 0.0.0.255 any
route-map dynamic-isp permit 102
match ip address 102
set interface s1 (interface to dynamic isp)

Some good info is at

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fqos_c/fqcprt1/qcfpbr.htm

 

[plshlpme]

thanks for the example.. i wish this 4500 could do pppoe-client.
so far ive only been able to get the static link to work.

ive turned my dsl modem into a router and it basically nats internally im not sure now how to set the router up to use this link...

i was thinking maybe i could mark packets as they come in on that interface.. and then use that mark as the route when it is going back out... i need to make sure that if it comes from that interface that its not forwarded out the default route or else it goes into oblivion

any ideas about whether this could work?
thanks