2621路由器做出口备份nat 的问题

tieren_1000

cisco2621  2个10/100 兆端口.f0/0为内口  f0/1为外口(绑定2个isp的地址)  目的是平常让用户走一isp1 出去,在isp1出现故障后走isp2出去,也就是isp2起备份作用
大家看一下下面的配置是否可行
Router>en
Password:
Router#show run
Building configuration...

Current configuration : 1090 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
enable password gtao123
!
no aaa new-model
ip subnet-zero
!
!
!
!
!
interface FastEthernet0/0
ip address 172.16.3.4 255.255.255.0
ip nat inside
speed 100
full-duplex
!
interface FastEthernet0/1
ip address 192.168.2.2 255.255.255.0 secondary
ip address 192.168.1.2 255.255.255.0
ip nat outside
speed 100
full-duplex
!
ip nat pool xiaoming 192.168.2.2 192.168.2.2 netmask 255.255.255.0
ip nat pool xiaoliu 192.168.1.2 192.168.1.2 netmask 255.255.255.0
ip nat inside source list 10 pool xiaoming overload
ip nat inside source list 20 pool xiaoliu overload
no ip http server
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.1.1
ip route 0.0.0.0 0.0.0.0 192.168.2.1 50
ip route 10.0.0.0 255.0.0.0 172.16.3.1
!
access-list 10 permit 10.0.0.0 0.255.255.255
access-list 20 permit 10.0.0.0 0.255.255.255
!
line con 0
line aux 0
line vty 0 4
password cisco123
login
!
!
!
end

ssffzz1

不行，NAT转换部分无法区分正确的下一条。
解决方法：
1、前端加一个可以划VLAN的交换机。2621起TRUNK，出2个子接口。这样分别再子接口做就没有问题了。
2、2621加以太口模块。

tieren_1000

好谢谢,我测试一下.

hisysjrw

ip route 0.0.0.0 0.0.0.0 192.168.1.1
ip route 0.0.0.0 0.0.0.0 192.168.2.1 50
前面的缺省路由只要本地接口不是down状态,
这条路由会一直存在路由表内,所以你这个方法是无法实现自动切换.