Metrics when redistributing a static default route into EIGRP?

I saw a network working with EIGRP and resdistributing a static default route into it. I did not find the "default metrics" to redistribute into EIGRP but the static default route works and is redistributed. My understanding was that everytime you redistribute into EIGRP you needed to specify the metrics. How come this network is working? Can someone explain or point to a cisco document what explains it?
Sample of the config:
router eigrp 1
redistribute static
no autosummary
network Y.Y.Y.Y
ip route 0.0.0.0 0.0.0.0 X.X.X.X
Thank you,

It's just one of those specific things about EIGRP and IOS, maybe a design choice. If they do use the interface as the seed metric then that would help explain why it's that way.
Weirdly if you are using EIGRP VRF address family configuration on IOS and you redistribute statics you do need a metric.
And I believe NXOS running on Nexus switches also needs a metric defined.
Just one of those things you have to remember but it would be good if it was consistent.
Jon

Similar Messages

  • How do I inject a static default route into vrf

    Could anybody give me any advise on injecting a static default route into vrf.
    The static route is to the internet, I can't enable vrf forwading on the fa interface as other users also use this internet connection.
    I am configuring a 7206 VXR 12.3(26) and have attached a copy of the config
    Any help gratefully received

    Hi
    I think you have to specify the route as this
    ip route vrf delegate_wireless fa0/0 0.0.0.0 0.0.0.0 194.154.168.1 global
    it tells the router to to use a next hop that is not part of the vrf.
    Also, don't forget that the return traffic has to be routed out to the vrf.
    Something like this.
    ip route a.b.c.d tu1 10.252.254.2
    /Mikael

  • UNABLE TO INJECT A STATIC DEFAULT ROUTE FROM PE????

    UNABLE TO INJECT A STATIC DEFAULT ROUTE FROM PE????
    Description:
    I am unable to get a static default route via MPBGP session for a vrf, any other route redistributed the same way is getting through.
    Just the static default route isn't ????
    1>
    SOURCE PE WHERE IS THE ROUTE REDISTRIBUTED:
    pe1#
    router bgp 4755
    bgp router-id 10.10.10.103
    no bgp default ipv4-unicast
    bgp log-neighbor-changes
    neighbor 10.10.10.100 remote-as 4755
    neighbor 10.10.10.100 update-source Loopback0
    address-family vpnv4
    neighbor 10.10.10.100 activate
    neighbor 10.10.10.100 send-community extended
    exit-address-family
    address-family ipv4 vrf B
    redistribute static <<<<<<<<<<<<<< STATIC REDIS
    no auto-summary
    no synchronization
    exit-address-family
    address-family ipv4 vrf A
    redistribute static <<<<<<<<<<<<<< STATIC REDIS
    no auto-summary
    no synchronization
    exit-address-family
    ip classless
    ip route vrf A 0.0.0.0 0.0.0.0 Serial1/0 192.168.1.2 global <<<< STATIC ROUTE POINTING THE GLOBAL CONTEXT INTERFACE
    ip route vrf B 0.0.0.0 0.0.0.0 Serial1/0 192.168.1.2 global <<<< STATIC ROUTE POINTING THE GLOBAL CONTEXT INTERFACE
    DESTINATION PE HERE I CANNOT SEE THE STATIC DEFAULT ROUTE:
    pe3(config-router-af)#do sh ip bgp vpnv4 all
    BGP table version is 11, local router ID is 10.10.10.103
    Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
    r RIB-failure, S Stale
    Origin codes: i - IGP, e - EGP, ? - incomplete
    Network Next Hop Metric LocPrf Weight Path
    Route Distinguisher: 4755:1 (default for vrf A)
    *>i172.16.1.0/30 10.10.10.101 0 100 0 ?
    *>i172.16.2.0/30 10.10.10.102 0 100 0 ?
    *>i172.16.10.0/24 10.10.10.101 2297856 100 0 ?
    *>i172.16.20.0/24 10.10.10.102 2297856 100 0 ?
    *>i172.16.200.0/24 10.10.10.102 2170112 100 0 ?
    Route Distinguisher: 4755:2 (default for vrf B)
    *>i172.16.1.0/30 10.10.10.101 0 100 0 ?
    *>i172.16.2.0/30 10.10.10.102 0 100 0 ?
    *>i172.16.10.0/24 10.10.10.101 2297856 100 0 ?
    *>i172.16.20.0/24 10.10.10.102 2297856 100 0 ?
    *>i172.16.200.0/24 10.10.10.102 2170112 100 0 ?
    THE STAITC ROUTE IS REDISTRIBUTED TO LOCAL VRF CONTXT ASWELL AS WE CAN SEE:
    pe3(config-router-af)#do sh ip route vrf A
    Routing Table: A
    Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
    D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
    N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
    E1 - OSPF external type 1, E2 - OSPF external type 2
    i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
    ia - IS-IS inter area, * - candidate default, U - per-user static route
    o - ODR, P - periodic downloaded static route
    Gateway of last resort is 192.168.1.2 to network 0.0.0.0
    172.16.0.0/16 is variably subnetted, 5 subnets, 2 masks
    B 172.16.200.0/24 [200/2170112] via 10.10.10.102, 00:00:23
    B 172.16.20.0/24 [200/2297856] via 10.10.10.102, 00:00:23
    B 172.16.10.0/24 [200/2297856] via 10.10.10.101, 00:00:23
    B 172.16.1.0/30 [200/0] via 10.10.10.101, 00:00:23
    B 172.16.2.0/30 [200/0] via 10.10.10.102, 00:00:23
    S* 0.0.0.0/0 [1/0] via 192.168.1.2, Serial1/0
    Hope I am clear in explaining the issue...
    Thanks,
    Dara

    Hehehe :)
    "Unfortunately" that's true !!!!
    This could have been the last thing that I try.
    Getting he techs work, protocols work is fine.
    But if get to make myself understand the logic behind adding this command as well than ... :(
    Thanks a lot,

  • Inject BGP Default Routes into Multiple VRF before Best Path Selection

    Hello, 
    I have the following setup:
    Multiple Border Routers with eBGP sessions to external AS. We receive a default route from this multiple AS to keep the Table manageable. We noticed an important part of our traffic was been SW routed instead of CEF when we had the Full Internet table. Router Resources came to the ground when we changed to a default. 
    Now I want to separate this default routes into different VRF. Attached is the Diagram. 
    My question is,  the multiple default route all go into the BGP Table. The BGP table then select the best route and place it on the RIB and then to the FIB. 
    I want to redistribute the different Route on the BGP table prior to the Best path selection algorithm and placed on the RIB. 
    How can I achieve this?

    Hi,
    Redistribution of multiple routes to same prefix is not possible. Even if you have configured BGP multipath and all different bgp routes got installed into routing table, during redistribution only route will be redistributed. 
    Also would like to understand the requirement of redistributing multiple BGP routes in to IGP. As per your diagram, 3 different eBGP sessions are on three different routers, so you can prefer eBGP route over iBGP received from other routers and can distribute eBGP route to IGP from each router. Thus you will have three different default routes in to IGP in core.
    Please don't forget to rate this post if it has been helpful
    - Akash

  • Injecting Global default Routes into a MPLS VPN

    Hi,
    I have a PE router running MPBGP which receives two default routes to the internet through an IPV4 BGP session. I need to import these routes in to a VRF and export them to different customer VRFs so that these VRFs are able to access Internet.
    I have used the feature called "BGP Support for IP Prefix Import from Global Table into a VRF Table" (URL:http://www.cisco.com/en/US/products/sw/iosswrel/ps5207/products_feature_guide09186a00803b8db9.html#wp1063870)
    and imported these routes into a VRF.
    The issue is these routes are not propagated to any of the other PE routers which has customer VRFs configured.
    Has anybody tried this or a similar method to inject a dynamic default route into a MPLS VPN.
    Any suggestions would be highly appreciated.
    Thanks
    Subhash

    Hi Subhash,
    is there anything preventing you from terminating your internet BGP sessions in a VRF? Then everything should go smoothly, i.e. standard VRF import/export.
    So possibility A) create a VRF Internet, move bgp neighbor commands there and use filters preventing anything but the default route, then use route targets to distribute the default route into other VRFs.
    Possibility B) use static routing with packet leaking. Could look like this:
    ip route vrf Internet 0.0.0.0 0.0.0.0 global
    ip route vrf Internet 0.0.0.0 0.0.0.0 global 250
    ip route Serial0/0 !assuming this is where the customer router connects.
    Note: the BGP peer IP does not have to be directly connected! There has to be a LDP label for it though. so include your BGP peers network into your IGP and the backup will work, when you loose the link to the peer.
    Hope this helps! Please rate all posts.
    Regards, Martin

  • WRV200 Unable to set static default route

    In my case i should use the wrv200 as a router with static routes.
    A tried to set up a route 0.0.0.0 0.0.0.0 192.168.1.254.
    I did not get any error messages after clicking the "save changes" button, but it does not work and it can't be seen on the routing table.
    I think that it is not a missing feature! That must be a bug!
    Could anybody help me please?

    I can not do that because the default gateway parameter belongs to the wan interface, which is connected with the router at the vineyard over vpn and has the ip 172.16.1.1 if I try to set here 192.168.1.254 it says:
    "The gateway should be in the same subnet as the interface" or something like that with the same meaning.
    I did not post but i use the firmware version 1.0.39

  • Modify the preference value of the default route

    Hi
    How to achieve the Below ? any configuration example?
    1)How to modify the preference value of the default route to be less prefered than OSPF External route
    2)how to redistribute the default route as type 2 external route
    3)how to redistribute the default route as type 1 external route
    thanks

    Hi Ibrahim,
    See below:
    1) Can you elaborate on this a bit? Can you explain, specifically, what your trying to accomplish? I don't think you can get a default route into the OSPF RIB that is not external as the default is injected as a Type-5 LSA (e1 or e2). If your talking about getting a router to use the OSPF learned default over the default router learned via some other source (e.g. static, BGP, etc), then it depends on the source because of the Administrative Distance when comparing the two defaults ( the one default learned via OSPF has AD=110, and the other default is AD=X, where X is the Administrative Distance assigned to the protocol).
    2) Use the "default-information originate metric-type 2" command under "router ospf" -- Note this is the default
    3) Use the "default-information originate metric-type 1" command under "router ospf" -- Note, you don't need this in Totally Stubby Area.
    4) For NSSA area you have to use the "area nssa <area_num> default information-originate metric-type <type>" router subcommand. Note your NSSA should have a Type-7 LSA for the default route
    Rate if helpful.
    Joe

  • Show ip route, Why 46.1.1.4 is chosen as default route ?

    Dear All,
    Can you give some idea about this: when entering command "show ip route" the output is as the following. Why  46.1.1.4 is chosen as default route instead of 36.1.1.3 ? Thank you
    R6#sh ip route
    Gateway of last resort is 46.1.1.4 to network 0.0.0.0
         36.0.0.0/24 is subnetted, 1 subnets
    C       36.1.1.0 is directly connected, FastEthernet0/1
         67.0.0.0/24 is subnetted, 1 subnets
    C       67.1.1.0 is directly connected, Serial0/2
         78.0.0.0/24 is subnetted, 1 subnets
    S       78.1.1.0 [1/0] via 67.1.1.7
         46.0.0.0/24 is subnetted, 1 subnets
    C       46.1.1.0 is directly connected, Serial0/0
    S*   0.0.0.0/0 [1/0] via 46.1.1.4
                          [1/0] via 36.1.1.3
    R6(config)#do sh run | s route
    ip route 0.0.0.0 0.0.0.0 36.1.1.3
    ip route 0.0.0.0 0.0.0.0 46.1.1.4
    ip route 78.1.1.0 255.255.255.0 67.1.1.7

    Hello, the static default route is showing to two next hops, 46.1.1.4 and 36.1.1.3. They have the same Admin Distance and cost, if CEF is enabled it will load-share per session (src-dst IP pair)
    If the router was only using one of the routes, only one would be displayed.

  • Basic Default Route Question

    Hi,
    I have a very basic question I wanted to run by everyone to make sure my understanding is correct.
    Setup:
    Basic config, router with two interfaces and a single default route.
    hostname RTR1
    interface Ethernet0/0
    ip address 1.1.1.1 255.255.255.0
    interface Ethernet0/1
    ip address 1.1.2.1 255.255.255.0
    ip route 0.0.0.0 0.0.0.0 1.1.2.2
    add -> ip route 0.0.0.0 0.0.0.0 10.10.10.1
    If I add a default route (currently in a telnet session coming through 1.1.2.2 to get to RTR1) to a gateway that is NOT locally connected nothing will happen, correct? The router won't try to load balance my traffic since the second gateway is not directly connected and reachable, correct?
    Next, if I change the IP address on e0/1 to 10.10.10.2/24 then my default route of 1.1.2.2 will no longer be used and my 10.10.10.1 defaut route will become active, correct?
    I can then connect using my new IP of 10.10.10.2 assuming all routing is working on my new default gateway, correct?
    Basically, I'm making sure my understanding of the default gateway route not being used unless it is accessible is valid. If it is, it will load balance traffic across up to 6 of them.
    Please comment or correct if my understanding is incorrect.
    Thanks.

    Jamie
    I believe that most of your understanding is ok especially about not load sharing over the routes as defined. I checked it on a router and only the default route with a reachable next hop is inserted into the routing table. Both static default routes are in the config but only one is in the routing table.
    HTH
    Rick

  • HSRP EIGRP TWO DEFAULT ROUTES

    Hi,
    I have a question concerning EIGRP routing on a L3 switch behind a HSRP HA pair of routers which connect to a WAN.
    HSRP is operating as should be and when R1 fails, or an interface thereon, R2 becomes the active. All good.
    However there are now two default routes in the route table on the L3 switch. One is routing traffic to the R2 real IP which is expected but also there is the old default route to R1's real IP.
    Using EEM we can overcome this but is there another simpler method to prevent this occurring?
    Thanks
    F

    F
    If i understand correcty your LAN interfaces on the routers ie. the ones connecting to the L3 switch are running HSRP and you are also running EIGRP between the L3 switch and the routers.
    If so you wouldn't usually have both solutions in use ie. you either -
    1) use HSRP and point the default route on the L3 switch to the HSRP VIP
    or
    2) use EIGRP between the routers and the L3 switch. If a router or interface fails it should stop advertising the default route to the L3 switch.
    However that sounds like it is not happening which suggests the default routes are not coming from the WAN.
    So where are the default routes in EIGRP on the L3 switch coming from ?
    Jon

  • Redistributing Floating Static route

    Hi All,
    I have a question.when we redistribute a static route with AD as 210 into MP-iBGP to carry the route to other PE's ,will it also carry the AD value for this route ?
    Help would be really appreciated.
    Thanks
    Regards
    Anantha Subramanian Natarajan

    Hello Anantha,
    AD is locally significant and is never propagated to another node by any protocol including BGP.
    the other PE will see a route in VRF of type iBGP so it will see something like
    B [200/0]
    the BGP AS path will have an origin ? meaning the prefix is the result of a redistribution on originator PE and not by the usage of network command.
    Hope to help
    Giuseppe

  • BGP Session drops when loading routes into a VRF

    I've configured a small MPLS network with 4 P routers (ASR 1002s) 4 PE routers (6509s) and two Cisco 7206s as route reflectors.  I'm using OSPF as the routing protocol on the PE-CE interfaces and have sham links configured between PE routers.  I currently have two VRFs configured on this network, one is working fine, and there are approximately 150 routes in this VRF. 
    The second vrf is configured, it also has ospf sham links configured, neighbors up, etc.
    The problem I have is that when I bring up the first PE-CE link and load about 7000 routes into the second vrf my BGP sessions between the other PEs and route-reflectors start timing out.  I do show the vpnv4 routes show up in the route-reflectors "sh ip bgp vpnv4 rd 14017:2" I believe the debug outputs below indicate the issue is in the route-reflectors, but was curious if anyone else had seen this issue.  The BGP peering IP address for one of the route-reflectors is 10.2.0.7 and one of the session dropping PEs is 10.2.0.13.
    Normal output from "unloaded" debug ip bgp vpnv4 unicast keepalives:
    Route-reflector output:
    May 16 09:35:31   2329: May 16 09:35:30.718 CDT: BGP: ses global 10.2.0.13 (0xA0519C0:1) Keep alive timer fired.
    May 16 09:35:31   2330: May 16 09:35:30.718 CDT: BGP: 10.2.0.13 KEEPALIVE requested (bgp_keepalive_timer_expired)
    May 16 09:35:31   2331: May 16 09:35:30.718 CDT: BGP: ses global 10.2.0.13 (0xA0519C0:1) service keepalive IO request.
    May 16 09:35:31   2332: May 16 09:35:30.718 CDT: BGP: 10.2.0.13 KEEPALIVE write request serviced in BGP_IO
    PE output:
    May 16 09:35:38.421 CDT: BGP: 10.2.0.7 KEEPALIVE requested (bgp_keepalive_timer_expired)
    May 16 09:35:38.421 CDT: BGP: 10.2.0.7 KEEPALIVE sent
    Route-reflector output:
    May 16 09:35:39   2341: May 16 09:35:38.427 CDT: BGP: 10.2.0.13 received KEEPALIVE, length (excl. header) 0
    Same output but during a "loaded" condition:
    Route-reflector output:
    May 15 20:41:31   774: May 15 20:41:31.015 CDT: BGP: ses global 10.2.0.13 (0xA091324:1) Keep alive timer fired.
    May 15 20:41:31   775: May 15 20:41:31.015 CDT: BGP: 10.2.0.13 KEEPALIVE requested (bgp_keepalive_timer_expired)
    May 15 20:41:31   778: May 15 20:41:31.015 CDT: BGP: ses global 10.2.0.13 (0xA091324:1) service keepalive IO request.
    May 15 20:42:29   793: May 15 20:42:28.363 CDT: BGP: ses global 10.2.0.13 (0xA091324:1) Keep alive timer fired.
    May 15 20:42:29   794: May 15 20:42:28.363 CDT: BGP: 10.2.0.13 KEEPALIVE requested (bgp_keepalive_timer_expired)
    May 15 20:43:23   805: May 15 20:43:22.638 CDT: BGP: ses global 10.2.0.13 (0xA091324:1) Keep alive timer fired.
    May 15 20:43:23   806: May 15 20:43:22.638 CDT: BGP: 10.2.0.13 KEEPALIVE requested (bgp_keepalive_timer_expired)
    May 15 20:43:33   813: May 15 20:43:33.934 CDT: %BGP-3-NOTIFICATION: received from neighbor 10.2.0.13 4/0 (hold time expired) 0 bytes
    PE output:
    May 15 20:43:33.927 CDT: %BGP-3-NOTIFICATION: sent to neighbor 10.2.0.7 4/0 (hold time expired) 0 bytes
    May 15 20:43:33.927 CDT: %BGP-5-ADJCHANGE: neighbor 10.2.0.7 Down BGP Notification sent
    Route-reflector output:
    May 15 20:43:34   814: May 15 20:43:33.934 CDT: %BGP-5-ADJCHANGE: neighbor 10.2.0.13 Down BGP Notification received
    It appears to me that we are missing "BGP: 10.2.0.13 KEEPALIVE write request serviced in BGP_IO"
    For full disclosure there are other BGP keep-alive events going on to the other PEs at this time, some passing, some failing.
    route-reflector info:
    route-reflector1#sh inv
    NAME: "Chassis", DESCR: "Cisco 7206VXR, 6-slot chassis"
    PID: CISCO7206VXR      , VID:    , SN: 37050753
    NAME: "NPE-G2 0", DESCR: "Cisco 7200 Series Network Processing Engine NPE-G2"
    PID: NPE-G2            , VID: V03 , SN: JAF1410AADM
    NAME: "disk2", DESCR: "256MB Compact Flash Disk for NPE-G2"
    PID: MEM-NPE-G2-FLD256 , VID:    , SN:
    NAME: "Power Supply 1", DESCR: "Cisco 7200 AC Power Supply"
    PID: PWR-7200-AC       , VID:    , SN:
    NAME: "Power Supply 2", DESCR: "Cisco 7200 AC Power Supply"
    PID: PWR-7200-AC       , VID:    , SN:
    route-reflector1#sh ver
    Cisco IOS Software, 7200 Software (C7200P-ADVIPSERVICESK9-M), Version 15.1(4)M5, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2012 by Cisco Systems, Inc.
    Compiled Tue 04-Sep-12 19:41 by prod_rel_team
    ROM: System Bootstrap, Version 12.4(12.2r)T, RELEASE SOFTWARE (fc1)
    BOOTLDR: Cisco IOS Software, 7200 Software (C7200P-BOOT-M), Version 15.1(4)M5, RELEASE SOFTWARE (fc1)
    route-reflector1 uptime is 15 weeks, 20 hours, 43 minutes
    System returned to ROM by reload at 11:03:48 UTC Thu Jan 31 2013
    System restarted at 12:37:52 CST Thu Jan 31 2013
    System image file is "disk2:c7200p-advipservicesk9-mz.151-4.M5.bin"
    Any thoughts on this problem would be greatly appreciated.

    Hi again,
    did you check this?
    http://www.cisco.com/en/US/tech/tk365/technologies_configuration_example09186a008010a28a.shtml
    I honestly do not remember the defaults in Cisco but I had a very similar issue working with Juniper because of this value was set @ about 4500 prefixes at once.
    Take care
    Alessio
    Sent from Cisco Technical Support iPad App

  • How can I set up lightroom 5 in my macbook, so that it becomes my default editing program, so that it starts up when I insert my sd card into the mac

    How can I set up lightroom 5, so that it becomes my main / default editing program & that when I insert my sd card into the mac lightroom starts instead of iPhoto .

    Thanks.  Im new to apple, which preference?
    Sent from my iPhone

  • Can anyone check this for me, nat overload, static and default routes, dhcp

    VA has DHCP on fa0/0 and will have last good address for the gateway and will reserve 20 IP's for admin devices.
    VA fa0/1 will be using static IP addressing and will be using the last good address as the default gateway address.
    Serial links will use the 50.75.120.0/30 network on all serials.
    Default route set to main via VAs next hop.
    VA will be using NAT overload to Main via local interface.
    VA
    Fa0/0= 172.16.81.254
    Fa0/1=172.16.82.126
    S0/0/0=50.75.120.130
    Main s0/0/1= 50.75.120.129 with a clock rate of 128kbps
    Building configuration...
    Current configuration : 1376 bytes
    version 12.4
    no service timestamps log datetime msec
    no service timestamps debug datetime msec
    no service password-encryption
    hostname VA
    enable secret 5 $1$mERr$3nisV1NYMTmTN5PhTMBC2/
    enable password insurance
    ip dhcp excluded-address 172.16.81.235 172.16.81.254
    ip dhcp pool VA-dhcp
    network 172.16.80.0 255.255.254.0
    default-router 172.16.81.254
    spanning-tree mode pvst
    interface FastEthernet0/0
    ip address 172.16.81.254 255.255.254.0
    ip nat inside
    duplex auto
    speed auto
    interface FastEthernet0/1
    ip address 172.16.82.126 255.255.255.128
    ip nat inside
    duplex auto
    speed auto
    interface Serial0/0/0
    ip address 50.75.100.130 255.255.255.252
    ip nat outside
    interface Serial0/0/1
    no ip address
    shutdown
    interface Vlan1
    no ip address
    shutdown
    ip nat inside source list 1 interface Serial0/0/0 overload
    ip nat inside source list 2 interface Serial0/0/0 overload
    ip classless
    ip route 0.0.0.0 0.0.0.0 Serial0/0/1
    ip route 50.74.100.128 255.255.255.252 50.74.100.130
    access-list 1 permit 172.16.0.0 0.0.255.255
    access-list 2 permit 172.16.0.0 0.0.255.255
    banner motd ^C
    Restricted access to all unauthorized users, proceed at your will. Unauthorized users will be prosecuted to the extend of the law. ^C
    line con 0
    password shots
    login
    line aux 0
    line vty 0 4
    password xrays
    login
    end
    VA(config)#
    A network beginner, thank you in advance :))
    Sent from Cisco Technical Support iPhone App

    Reyna,
    I can see a couple of issues
    Your static routes:-
    ip route 0.0.0.0 0.0.0.0 Serial0/0/1
    ip route 50.74.100.128 255.255.255.252 50.74.100.130
    Ser 0/0/1 is shut and has no ip addressing.
    The route to 50.74.100.128 has no way to reach the next hop 50.74.100.130
    Your NAT translations are both the same therfore only one is effective.
    Just tidy up a little:-
    The only static route you need is a default route:-
    ip route 0.0.0.0 0.0.0.0 50.75.100.129
    The NAT only requires one list and trans pointing out the outside interface
    ip nat inside source list 1 interface Serial0/0/1 overload
    access-list 1 permit 172.16.0.0 0.0.255.255
    Regards,
    Alex.
    Please rate useful posts.

  • Introduce second default gateway into policy-based routing and optimization

    Questions:
    1) How to get the second PBR_DEFAULT_GATEWAY address 10.20.20.3 into the policy-based routing for redundancy?
    2) Any optimizations as more and more traffic (policy-based routed and otherwise) goes through interface Gi1/0/1?
    Address range A.B.0.0/16 represents assigned Internet-routable addresses.
    Network also uses 10.0.0.0/8, 172.16.0.0/20, 192.168.0.0/16.
    DEFAULT_GATEWAY router participates in OSPF and injects the default routes 0.0.0.0/0 10.10.10.1 and 0.0.0.0/0 10.20.20.1 into OSPF.
    PBR_DEFAULT_GATEWAY router participates in OSPF but filters out default routes injected by DEFAULT_GATEWAY router.
    ROUTER_A participates in OSPF and receives default routes injected by DEFAULT_GATEWAY router.
    ROUTER_A contains the attached policy-routing configuration that allows the subnet A.B.30.0/24 to route anywhere on the network and uses PBR_DEFAULT_GATEWAY as the way out.

    Ok I will see if I can run out to work and try this today..
    After thinking about this, If I need to get to local ip addresses (192.168.1.0 and 192.168.128.0), I might have to change my route map to include those ranges in an ACL, then assign the 172.20.200.1 as the gateway to get to those networks, with the last statement being the traffic to be sent out the firewall
    for instance
    # Access to one of my local networks
    access-list 101 permit ip 172.20.200.0 0.0.0.255 192.168.1.0 0.0.0.255
    # Send Internet traffic to ASA/PIX
    access-list 172 permit ip 172.20.200.0 0.0.0.255 any
    route-map pix-172-20-200 permit 10
    match ip address 101
    set ip next-hop 172.20.200.1
    route-map pix-172-20-200 permit 20
    match ip address 172
    set ip next-hop 172.20.200.2
    and so on?
    I know I need to be in front of my switch to test the change from set ip default next-hop to set ip next-hop...
    I wantto make sure I can still get to the local networks I need to get to.
    I appreciate all your help, and I will test this later on today..
    Thanks
    Don Hickey

Maybe you are looking for