Topology:
Config for Site 1:
ip sla 1
icmp-echo 10.15.0.2 source-ip 10.15.0.1
threshold 2
timeout 1000
frequency 3
ip sla schedule 1 life forever start-time now
track 1 ip sla 1 reachability
ip route 10.2.3.0 255.255.255.0 10.15.0.2 track 1
ip route 10.2.3.0 255.255.255.0 10.0.10.5 10
Config for Site 2:
ip sla 1
icmp-echo 10.15.0.1 source-ip 10.15.0.2
threshold 2
timeout 1000
frequency 3
ip sla schedule 1 life forever start-time now
track 1 ip sla 1 reachability
ip route 10.20.15.0 255.255.255.0 10.15.0.1 track 1
ip route 10.20.15.0 255.255.255.0 10.20.3.253 10
Notes:
10.15.0.2 is the IP address on Site 2 fiber port.
10.15.0.1 is the IP address on Site 1 fiber port.
10.0.10.5 is the IP address on Site 1 LAN Firewall port.
10.20.3.253 is the IP address on Site 2 LAN Firewall port.
Basically, if the fiber goes down, then change the routing table to go across the VPN to the remote site, is the idea here.
Site 1 4500:
Switch#sh track
Track 1
IP SLA 1 reachability
Reachability is Up
1 change, last change 00:02:09
Latest operation return code: Over threshold
Latest RTT (millisecs) 4
Tracked by:
Static IP Routing 0
Admin_Switch#sh ip route
...
S 10.20.3.0/24 [1/0] via 10.15.0.2
Switch# config t
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)#int vlan 99
Switch(config-if)#shut
Switch(config-if)#exit
Switch(config)#exit
Switch#sh track
Track 1
IP SLA 1 reachability
Reachability is Down
2 changes, last change 00:00:02
Latest operation return code: Timeout
Tracked by:
Static IP Routing 0
Switch#sh ip route
...
S 10.20.3.0/24 [10/0] via 10.0.10.5
Switch(config)#int vlan 99
Switch(config-if)#no shut
Switch(config-if)#exit
Switch(config)#exit
Switch(config-if)#no shut
Switch(config-if)#exit
Switch(config)#exit
Switch#sh track
Track 1
IP SLA 1 reachability
Reachability is Up
3 changes, last change 00:00:03
Latest operation return code: Over threshold
Latest RTT (millisecs) 4
Tracked by:
Static IP Routing 0
Switch#sh ip route
...
S 10.20.3.0/24 [1/0] via 10.15.0.2
Switch#
No comments:
Post a Comment
Your comment will be reviewed for approval. Thank you for submitting your comments.