I am working on a LTE backup configuration. I would like to have the cellular connection open constantly and establish a VPN connection even before a failure on the wired internet line occurs. This forces me to work with different VRFs. The VPN part, i have figured out and it is working fine. Sadly, the internet connection is used as a guest net for customers. So i have to think of a way to reroute the traffic from the wired, to the wireless (LTE) interface if there is an issue with the wired connection. I created following configuration:
ip vrf DSL description Wired internet ip vrf LTE description Wireless internet ip route vrf DSL 0.0.0.0 0.0.0.0 Dialer1 ip route vrf LTE 0.0.0.0 0.0.0.0 Cellular0/2/0 ip sla 111 icmp-echo 184.108.40.206 vrf DSL threshold 500 timeout 800 frequency 3 ip sla 222 icmp-echo 220.127.116.11 vrf DSL threshold 500 timeout 800 frequency 3 ip sla schedule 111 life forever start-time now ip sla schedule 222 life forever start-time now track 111 ip sla 111 reachability track 222 ip sla 222 reachability ip access-list extended FORCE_VRF_LTE 10 permit icmp any host 18.104.22.168 route-map FORCE_VRF_LTE permit 10 match ip address FORCE_VRF_LTE set vrf LTE ip local policy route-map FORCE_VRF_LTE
So basically, i have 2 VRFs with its corresponding default route. I create 2 IP SLAs in vrf DSL to simulate client traffic. Then, i want to force one of the pings out of the cellular interface. But this does not work. As soon as i enter the ip local policy command, the track 222 goes down. In the route-map i tried different commands like:
set ip default vrf LTE next-hop 22.214.171.124 set vrf LTE set interface cellular0/2/0
But nothing worked so far. Is this even supposed to work? What am i missing?