Cisco 2811 with 2 networks and 2 ADSL

[tankt0p]

Hi,

I need to setup a Cisco 2811 with 2 ADSL WICS and 2 ethernet ports so that the network connected to fe0 only uses ADSL1 and the network connected to fe1 only goes out of ADSL2.

What would be the best way to configure this? Is PBR the way to go and if so how would you set this up with NAT etc...

Many thanks

 

[webnetwiz]

That really depends on what your requirements are, you can also do this with static routes, but again, everything depends on requirements, and design stems from that.

 

[ADB100]

I think PBR is the only way you will achive this. I assume each Ethernet interface is only connected to a single IP network/subnet - i.e. there is no routing going on behind the LAN interfaces?

interface ethernet0
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip policy route-map E0-Dialer1
!
intercace ethernet1
ip address 192.168.2.1 255.255.255.0
ip nat inside
ip policy route-map E1-Dialer2
!
interface ATM0
no ip address
no ip redirects
no ip proxy-arp
no atm ilmi-keepalive
dsl operating-mode auto
pvc 0/38
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
interface ATM1
no ip address
no ip redirects
no ip proxy-arp
no atm ilmi-keepalive
dsl operating-mode auto
pvc 0/38
encapsulation aal5mux ppp dialer
dialer pool-member 2
!
interface Dialer1
ip address negotiated
ip nat outside
encapsulation ppp
dialer pool 1
dialer-group 1
ppp authentication chap callin
ppp chap hostname USERNAME-ISP-1
ppp chap password PASSWORD-ISP-1
!
interface Dialer2
ip address negotiated
ip nat outside
encapsulation ppp
dialer pool 2
dialer-group 1
ppp authentication chap callin
ppp chap hostname USERNAME-ISP-2
ppp chap password PASSWORD-ISP-2
!
access-list 10 permit 192.168.1.0 0.0.0.255
access-list 20 permit 192.168.2.0 0.0.0.255
!
route-map E0-Dialer1
match ip address 10
set interface dialer 1
!
route-map E1-Dialer2
match ip address 20
set interface dialer 2
!
ip nat inside source list 10 interface dialer1 overload
ip nat inside source list 20 interface dialer2 overload
!

I am not 100% sure about the config as it was written off the top of my head - but it should be a start.... If this is an ISP setup (i.e. directly to the internet) then I assume you will want Inbound & Outbound ACL's plus Context Based Access Control (Firewalling)?

HTH

Andy

 

[tankt0p]

Many thanks for the replies. I will give the above config a go.