Tuesday, October 24, 2017

Cisco IP SLA

I did a IP SLA configuration on two Cisco 4500s the other day.  Its really a great solution for multi path or dual-ISP, if you dont run a routing protocol.  See below, the config and some notes.

Topology:















Config for Site 1:
ip sla 1
icmp-echo 10.15.0.2 source-ip 10.15.0.1
threshold 2
timeout 1000
frequency 3
ip sla schedule 1 life forever start-time now

track 1 ip sla 1 reachability

ip route 10.2.3.0 255.255.255.0 10.15.0.2 track 1
ip route 10.2.3.0 255.255.255.0 10.0.10.5 10

Config for Site 2:
ip sla 1
icmp-echo 10.15.0.1 source-ip 10.15.0.2
threshold 2
timeout 1000
frequency 3
ip sla schedule 1 life forever start-time now

track 1 ip sla 1 reachability

ip route 10.20.15.0 255.255.255.0 10.15.0.1 track 1
ip route 10.20.15.0 255.255.255.0 10.20.3.253 10


Notes:
10.15.0.2 is the IP address on Site 2 fiber port.
10.15.0.1 is the IP address on Site 1 fiber port.
10.0.10.5 is the IP address on Site 1 LAN Firewall port.
10.20.3.253 is the IP address on Site 2 LAN Firewall port.
Basically, if the fiber goes down, then change the routing table to go across the VPN to the remote site, is the idea here.

Site 1 4500:
Switch#sh track
Track 1
  IP SLA 1 reachability
  Reachability is Up
    1 change, last change 00:02:09
  Latest operation return code: Over threshold
  Latest RTT (millisecs) 4
  Tracked by:
    Static IP Routing 0
Admin_Switch#sh ip route
...
S        10.20.3.0/24 [1/0] via 10.15.0.2

Switch# config t
Enter configuration commands, one per line.  End with CNTL/Z.
Switch(config)#int vlan 99
Switch(config-if)#shut
Switch(config-if)#exit
Switch(config)#exit
Switch#sh track
Track 1
  IP SLA 1 reachability
  Reachability is Down
    2 changes, last change 00:00:02
  Latest operation return code: Timeout
  Tracked by:
    Static IP Routing 0
Switch#sh ip route
...
S        10.20.3.0/24 [10/0] via 10.0.10.5

Switch(config)#int vlan 99
Switch(config-if)#no shut
Switch(config-if)#exit
Switch(config)#exit
Switch#sh track
Track 1
  IP SLA 1 reachability
  Reachability is Up
    3 changes, last change 00:00:03
  Latest operation return code: Over threshold
  Latest RTT (millisecs) 4
  Tracked by:
    Static IP Routing 0

Switch#sh ip route
...
S        10.20.3.0/24 [1/0] via 10.15.0.2
Switch#


No comments:

Post a Comment

Your comment will be reviewed for approval. Thank you for submitting your comments.