Pbr based ports , not working

Question

Hi,
I need that incoming connection to port 3389 come to ISP1, and incoming connection to port 5800 come to ISP2. I configured the follow config, but not working, could you help me?
And i need another config, the IP SLA to configure outbound traffic from inside to any destination ( except ports 3389 and 5800), the ISP1 is the primary link , when this link is down, the ISP2 stay actived to outbound traffic.
interface GigabitEthernet0/0
 ip address 1.1.1.1 255.255.255.0
 ip nat inside
 ip virtual-reassembly
 ip policy route-map internet
 duplex auto
 speed auto
interface GigabitEthernet0/1
 ip address 2.2.2.2 255.255.255.0
 ip nat outside
 ip virtual-reassembly
 duplex auto
 speed auto
interface GigabitEthernet0/2
 ip address 3.3.3.2 255.255.255.0
 ip nat outside
 ip virtual-reassembly
 duplex auto
 speed auto
ip nat inside source list nat-isp1 interface GigabitEthernet0/1 overload
ip nat inside source list nat-isp2 interface GigabitEthernet0/2 overload
ip access-list extended nat-isp1
 permit ip any any
ip access-list extended nat-isp2
 permit ip any any
ip nat inside source static tcp 1.1.1.3 5800 3.3.3.2 5800 extendable
ip nat inside source static tcp 1.1.1.3 3389 2.2.2.2 3389 extendable
ip route 0.0.0.0 0.0.0.0 2.2.2.1
ip route 0.0.0.0 0.0.0.0 3.3.3.1
ip access-list extended pbr-isp1
 permit tcp any any eq 3389
ip access-list extended pbr-isp2
 permit tcp any any eq 5800
route-map internet permit 20
 match ip address pbr-isp1
 set ip next-hop 2.2.2.1
 set interface GigabitEthernet0/1
route-map internet permit 30
 match ip address pbr-isp2
 set ip next-hop 3.3.3.1
 set interface GigabitEthernet0/2

Answer 1

Hi LukaszTJB ,
Sorry for the late, I need help again, i´ve configured this way,the IPsla is working, but when the ISP2 come up, the nat table dont clear automatic, i tried EEM but no success.
I need another thing, supose the active link is ISP1, i need the incommig from ISP2 connections by port 5800 working.
=====================================================================
Interfaces:
interface Embedded-Service-Engine0/0
 no ip address
 shutdown
interface GigabitEthernet0/0
 ip address 1.1.1.1 255.255.255.0
 ip nat inside
 ip virtual-reassembly in
 ip policy route-map internet
 duplex auto
 speed auto
interface GigabitEthernet0/1
 ip address 2.2.2.2  255.255.255.0
 ip nat outside
 ip virtual-reassembly in
 duplex auto
 speed auto
interface GigabitEthernet0/2
 ip address 3.3.3.2 255.255.255.0
 ip nat outside
 ip virtual-reassembly in
 duplex auto
 speed auto
=============================================================
NATs:
ip nat inside source route-map ISP2 interface GigabitEthernet0/1 overload
ip nat inside source route-map ISP1 interface GigabitEthernet0/2 overload
==================================================================
Routes and IP SLA:
ip route 0.0.0.0 0.0.0.0.0 2.2.2.1 track 10
ip route 0.0.0.0 0.0.0.0.0  3.3.3.1 254
track 10 ip sla 1 reachability
ip sla 1
 icmp-echo 8.8.8.8 source-interface GigabitEthernet0/2
 threshold 5
 frequency 5
ip sla schedule 1 life forever start-time now
ip sla responder
=======================================================
Configs to ISP1:
ip access-list extended acl-ISP1
 deny   tcp any eq 5800 any
 permit ip any any
 permit icmp any any
ip access-list extended nat-ISP1
 permit ip 1.1.1.0 0.0.0.255 any
route-map internet permit 10
 match ip address acl-ISP1
 match interface GigabitEthernet0/2
 set ip next-hop 2.2.2.1
route-map ISP1 permit 10
 match ip address nat-ISP1
 match interface GigabitEthernet0/2
==============================================================
Configs to ISP2:
ip nat inside source static tcp 1.1.1.3 5800 3.3.3.2 5800 extendable
ip access-list extended nat-ISP2
 permit ip 1.1.1.0 0.0.0.255 any
ip access-list extended acl-ISP2
 permit   tcp any eq 5800 any
 deny  ip any any
route-map internet permit 20
 match ip address acl-ISP2
 match interface GigabitEthernet0/1
 set ip next-hop 3.3.3.1
route-map ISP2 permit 10
 match ip address nat-ISP2
 match interface GigabitEthernet0/1
=============================================================
EEM :
event manager applet Clear_NAT
event track 10 state any
action 0.0 cli command "enable"
action 1.0 cli command "clear ip nat translation forced *"
action 3.0 syslog msg "WAN failover, cleared NAT"