0

I am working on a LTE backup configuration. I would like to have the cellular connection open constantly and establish a VPN connection even before a failure on the wired internet line occurs. This forces me to work with different VRFs. The VPN part, i have figured out and it is working fine. Sadly, the internet connection is used as a guest net for customers. So i have to think of a way to reroute the traffic from the wired, to the wireless (LTE) interface if there is an issue with the wired connection. I created following configuration:

ip vrf DSL
 description Wired internet
ip vrf LTE
 description Wireless internet

ip route vrf DSL 0.0.0.0 0.0.0.0 Dialer1
ip route vrf LTE 0.0.0.0 0.0.0.0 Cellular0/2/0

ip sla 111
 icmp-echo 157.240.17.35
  vrf DSL
  threshold 500
  timeout 800
  frequency 3
  
ip sla 222
 icmp-echo 104.244.42.1
  vrf DSL
  threshold 500
  timeout 800
  frequency 3
  
ip sla schedule 111 life forever start-time now
ip sla schedule 222 life forever start-time now

track 111 ip sla 111 reachability
track 222 ip sla 222 reachability

ip access-list extended FORCE_VRF_LTE
 10 permit icmp any host 104.244.42.1

route-map FORCE_VRF_LTE permit 10 
 match ip address FORCE_VRF_LTE
 set vrf LTE

ip local policy route-map FORCE_VRF_LTE

So basically, i have 2 VRFs with its corresponding default route. I create 2 IP SLAs in vrf DSL to simulate client traffic. Then, i want to force one of the pings out of the cellular interface. But this does not work. As soon as i enter the ip local policy command, the track 222 goes down. In the route-map i tried different commands like:

set ip default vrf LTE next-hop 1.1.1.1
set vrf LTE
set interface cellular0/2/0

But nothing worked so far. Is this even supposed to work? What am i missing?

  • do i have to configure some route-leaking in order for the returning packet to be routed back to the originating VRF, maybe? – Mario Jost Oct 29 '20 at 14:41

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.