Исходное сообщение
"2 ISP нет пинга с внешнего мира" Отправлено karen durinyan, 03-Июн-11 14:58
>[оверквотинг удален] >   Known via "static", distance 1, metric 0 (connected), candidate default > path >   Routing Descriptor Blocks: >   * directly connected, via Dialer1 >       Route metric is 0, traffic share > count is 1 >> А чтобы было 2 сразу активно нужны VRF-ы. > подкиньте если есть возможность кусочек рабочего конфига с  VRF, я с > ним не знаком, но начинать с чего то нужно ) > Спасибо. ! ! NVRAM config last updated at 06:49:25 UTC Wed Apr 27 2011 by cco ! version 12.4 service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname xxx-br1 ! boot-start-marker boot system flash c2800nm-advipservicesk9-mz.124-22.T3.bin boot-end-marker ! vrf definition local rd 0:0 route-target export 0:0 route-target import 0:0 route-target import 100:0 route-target import 200:0 ! address-family ipv4 exit-address-family ! vrf definition isp1                                                                                                                                   rd 100:0                                                                                                                                               route-target export 100:0                                                                                                                             route-target import 100:0                                                                                                                             route-target import 0:0                                                                                                                               route-target import 200:0                                                                                                                             !                                                                                                                                                     address-family ipv4 exit-address-family ! vrf definition isp2 rd 200:0 route-target export 200:0 route-target import 200:0 route-target import 0:0 route-target import 100:0 ! address-family ipv4 exit-address-family ! logging message-counter syslog logging buffered 4096 no logging console enable secret 5 xxx ! no aaa new-model ! ! ! dot11 syslog ip source-route ! ! ip cef ! ! no ip domain lookup no ipv6 cef ! multilink bundle-name authenticated ! ! ! ! vpdn enable ! ! ! ! ! ! ! ! ! ! ! ! ! !         ! ! ! ! ! voice-card 0 ! ! ! username cco secret 5 xxx ! ! ! archive log config   hidekeys ! ! ip tftp source-interface Loopback0 ip ssh version 2 ! track 1 ip sla 1 ! ! ! ! interface Loopback0 vrf forwarding local ip address 10.218.127.1 255.255.255.255 ! interface FastEthernet0/0 vrf forwarding isp1 no ip address duplex auto speed auto pppoe enable group global pppoe-client dial-pool-number 1 ! interface FastEthernet0/1 vrf forwarding isp2 no ip address duplex auto speed auto pppoe enable group global pppoe-client dial-pool-number 2 ! interface FastEthernet0/0/0 no ip address ip flow ingress duplex full speed 100 ! interface FastEthernet0/0/0.2 vrf forwarding local encapsulation dot1Q 2 native ip address 10.218.2.1 255.255.255.0 ip flow ingress ! interface FastEthernet0/0/0.12 vrf forwarding local encapsulation dot1Q 12 ip address 192.168.1.1 255.255.255.0 ip flow ingress ip nat inside ip virtual-reassembly ip tcp adjust-mss 1300 ! interface Dialer1 description isp1 vrf forwarding isp1 ip address negotiated no ip proxy-arp ip mtu 1492 ip flow ingress ip nat outside ip virtual-reassembly max-reassemblies 64 encapsulation ppp dialer pool 1 ppp authentication pap callin ppp pap sent-username xxx password 7 xxx ! interface Dialer2 description isp2 vrf forwarding isp2 ip address negotiated no ip proxy-arp ip mtu 1492 ip flow ingress ip nat outside ip virtual-reassembly max-reassemblies 64 encapsulation ppp dialer pool 2 ppp authentication pap callin ppp pap sent-username xxx password 7 xxx ! ! router bgp 65535 no synchronization bgp router-id 10.218.127.1 bgp log-neighbor-changes no auto-summary ! address-family ipv4 vrf isp2   redistribute connected   redistribute static   no synchronization exit-address-family ! address-family ipv4 vrf isp1   redistribute connected   redistribute static   no synchronization exit-address-family ! address-family ipv4 vrf local   redistribute connected   redistribute static   no synchronization exit-address-family ! no ip forward-protocol nd ip route vrf local 0.0.0.0 0.0.0.0 Dialer1 track 1 ip route vrf local 0.0.0.0 0.0.0.0 Dialer2 200 ip route vrf isp1 0.0.0.0 0.0.0.0 Dialer1 ip route vrf isp2 0.0.0.0 0.0.0.0 Dialer2 no ip http server no ip http secure-server ! ip flow-cache timeout active 1 ip flow-export source Loopback0 ip flow-export version 5 ip flow-export destination 192.168.1.11 9996 vrf local ! ip nat inside source route-map nat-isp1 interface Dialer1 vrf local overload ip nat inside source route-map nat-isp2 interface Dialer2 vrf local overload ip nat inside source static tcp 192.168.1.11 22 xxx 22 vrf local extendable ! ip access-list extended nat-isp1 permit ip 192.168.1.0 0.0.0.255 any permit ip 10.218.0.0 0.0.255.255 any ip access-list extended nat-isp2 permit ip 192.168.1.0 0.0.0.255 any permit ip 10.218.0.0 0.0.255.255 any ! ip sla 1 icmp-echo xxx source-interface Dialer1 vrf isp1 frequency 10 ip sla schedule 1 life forever start-time now ! ! ! ! route-map nat-isp2 permit 10 match ip address nat-isp2 match interface Dialer2 ! route-map nat-isp1 permit 10 match ip address nat-isp1 match interface Dialer1 ! ! ! ! control-plane ! ! ! ccm-manager fax protocol cisco ! mgcp fax t38 ecm mgcp behavior g729-variants static-pt ! ! ! ! ! ! line con 0 password 7 xxx login local line aux 0 password 7 xxx login local line vty 0 4 password 7 xxx login local transport input ssh line vty 5 15 password 7 xxx login local transport input ssh ! scheduler allocate 20000 1000 ntp source Loopback0 ntp server vrf local 192.168.1.11 end