Добрый день многоуважаемый ALL.
Столкнулся с такой проблемой и не знаю как победить :(
В офисе стоит маршрутизатор 1760 с WIC-4ESW к нему подключены два ADSL модема D-Link один в бридже, на другом поднято PPPoE. Провайдер один Ростелеком.
Суть проблемы - не получается настроить одновременную работу по двум каналом.
После многих недель экспериментов так и не смог заставить работать в паре.
Как мне кажется проблема в настройке маршрутизации, т.к. при выключении одной из строк статической маршрутизации:
ip route 0.0.0.0 0.0.0.0 Dialer1
ip route 0.0.0.0 0.0.0.0 162.168.1.1
все прекрасно работает.
Подскажите, пожалуйста, что необходимо еще сделать, чтоб заработало.
Заранее огромное СПАСИБО!

Работающий сейчас конфиг:

version 12.4
parser config cache interface
parser config interface
service nagle
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service linenumber
service sequence-numbers
!
hostname CISCO-1760R-001
!
logging userinfo
logging buffered 8192
logging rate-limit all 10 except warnings
logging console errors
enable secret 5 $1$r7l5$nsH2yTQQ/fMhGplY0qCNP1
!
aaa new-model
!
aaa authentication login default group ACCESS line
aaa authentication login NO_ACS enable
aaa authentication login VTY group ACCESS local
aaa authentication enable default group ACCESS enable
aaa authorization exec default group ACCESS local
aaa authorization exec VTY group ACCESS local
aaa authorization network default group ACCESS local
aaa accounting update newinfo periodic 5
aaa accounting exec default start-stop group ACCESS
aaa accounting exec NO_ACS start-stop group ACCESS
aaa accounting exec VTY start-stop group ACCESS
aaa accounting network default start-stop group ACCESS
aaa accounting connection default start-stop group ACCESS
aaa accounting system default start-stop group ACCESS
!
aaa session-id common
clock timezone GMT 4
clock save interval 8
errdisable recovery cause udld
errdisable recovery cause bpduguard
errdisable recovery cause rootguard
errdisable recovery cause pagp-flap
errdisable recovery cause dtp-flap
errdisable recovery cause link-flap
errdisable recovery interval 60
!
no ip source-route
ip icmp rate-limit unreachable 1000
ip icmp rate-limit unreachable DF 1000
ip cef
!
no ip dhcp use vrf connected
ip dhcp excluded-address 10.10.10.1 10.10.10.100
ip dhcp excluded-address 10.10.20.1 10.10.20.100
ip dhcp excluded-address 10.10.30.1 10.10.30.100
ip dhcp excluded-address 10.10.40.1 10.10.40.100
ip dhcp excluded-address 192.168.1.1 192.168.1.100
ip dhcp ping packets 5
!
ip dhcp pool LOCAL-LAN
   import all
   network 10.10.10.0 255.255.255.0
   default-router 10.10.10.1
   dns-server 192.168.0.1
   lease 3
!
ip dhcp pool LOCAL-WI-FI
   import all
   network 10.10.20.0 255.255.255.0
   default-router 10.10.20.1
   dns-server 192.168.0.1
   lease 3
!
ip dhcp pool GUEST1-WI-FI
   import all
   network 10.10.30.0 255.255.255.0
   default-router 10.10.30.1
   dns-server 192.168.0.1
   lease 3
!
ip dhcp pool DEFAULT-LAN
   import all
   network 192.168.1.0 255.255.255.0
   default-router 192.168.1.1
   dns-server 192.168.0.1
   lease 3
!
no ip bootp server
ip domain retry 5
ip domain timeout 5
ip domain name trafik.sytes.net
ip domain-lookup source-interface Loopback0
ip host ntp2.fryxell.info 109.197.193.160
ip host time.m18.ru 77.234.201.218
ip host ntp2.aas.ru 195.210.129.214
ip name-server 85.175.46.130
ip name-server 85.175.46.122
!
login on-failure
login on-success
!
multilink bundle-name authenticated
!
dot1x system-auth-control
!
no spanning-tree optimize bpdu transmission
spanning-tree uplinkfast
spanning-tree backbonefast
username cisco privilege 15 secret 5 $1$u1tk$uyKyfc19UtF.yDHc0
!
ip tcp selective-ack
ip tcp timestamp
ip tcp synwait-time 5
ip tcp path-mtu-discovery
ip ssh maxstartups 3
ip ssh time-out 60
ip ssh authentication-retries 2
ip ssh source-interface Loopback0
ip ssh logging events
ip ssh version 2
ip scp server enable
!
track 1 rtr 1 reachability
!
track 100 list boolean or
object 101
object 102
!
track 101 rtr 101 reachability
delay down 20 up 40
!
track 102 rtr 102 reachability
delay down 20 up 40
!
track 200 list boolean or
object 201
object 202
!
track 201 rtr 201 reachability
delay down 20 up 40
!
track 202 rtr 202 reachability
delay down 20 up 40
!
bba-group pppoe global
!
interface Loopback0
description -= ROUTER-ID LOCAL =-
ip address 192.168.0.1 255.255.255.255
no ip redirects
no ip unreachables
no ip proxy-arp
no ip route-cache cef
no ip route-cache
no ip mroute-cache
load-interval 60
no keepalive
!
interface Null0
no ip unreachables
!
interface FastEthernet0/0
description -= LINK TO SWITCH =-
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
no ip mroute-cache
load-interval 60
speed 100
full-duplex
no keepalive
no cdp enable
!
interface FastEthernet0/0.1
description -= VLAN1_DEFAULT-LAN =-
encapsulation dot1Q 1 native
ip address 192.168.1.1 255.255.255.0
ip broadcast-address 192.168.1.0
ip verify unicast reverse-path
ip accounting output-packets
ip flow ingress
ip flow egress
ip nat inside
ip virtual-reassembly
no cdp enable
ip tcp adjust-mss 1452
!
interface FastEthernet0/0.110
description -= VLAN110_LOCAL-LAN =-
encapsulation dot1Q 110
ip address 10.10.10.1 255.255.255.0
ip broadcast-address 10.10.10.0
ip verify unicast reverse-path
ip accounting output-packets
ip flow ingress
ip flow egress
ip nat inside
ip virtual-reassembly
no cdp enable
ip tcp adjust-mss 1452
!
interface FastEthernet0/0.120
description -= VLAN120_LOCAL-WI-FI =-
encapsulation dot1Q 120
ip address 10.10.20.1 255.255.255.0
ip broadcast-address 10.10.20.0
ip verify unicast reverse-path
ip accounting output-packets
ip flow ingress
ip flow egress
ip nat inside
ip virtual-reassembly
no cdp enable
ip tcp adjust-mss 1452
!
interface FastEthernet0/0.130
description -= VLAN130_GUEST1-WI-FI =-
bandwidth 1024
encapsulation dot1Q 130
ip address 10.10.30.1 255.255.255.0
ip broadcast-address 10.10.30.0
ip verify unicast reverse-path
ip accounting output-packets
ip flow ingress
ip flow egress
ip nat inside
ip virtual-reassembly
no cdp enable
ip tcp adjust-mss 1452
!
interface FastEthernet0/0.180
description -= VLAN180_SERVER-LAN =-
encapsulation dot1Q 180
ip address 10.10.80.1 255.255.255.0
ip broadcast-address 10.10.80.0
ip verify unicast reverse-path
ip accounting output-packets
ip flow ingress
ip flow egress
ip nat inside
ip virtual-reassembly
no cdp enable
ip tcp adjust-mss 1452
!
interface FastEthernet1/1
description -= ACCESS_PORTS link to RTK-1 =-
switchport access vlan 162
speed 100
no keepalive
no cdp enable
spanning-tree portfast
!
interface FastEthernet1/2
description -= ACCESS_PORTS link to RTK-2 =-
switchport access vlan 163
speed 100
no keepalive
no cdp enable
spanning-tree portfast
!
interface FastEthernet1/3
description -= ACCESS_PORTS =-
switchport access vlan 999
speed 100
no keepalive
no cdp enable
spanning-tree portfast
!
interface FastEthernet1/4
description -= ACCESS_PORTS =-
switchport access vlan 999
speed 100
no keepalive
no cdp enable
spanning-tree portfast
!
interface Vlan1
no ip address
!
interface Vlan162
description -= VLAN162_LOCAL-LAN-WIC =-
ip address 162.168.1.3 255.255.255.0
ip broadcast-address 162.168.1.0
no ip redirects
no ip unreachables
no ip proxy-arp
no ip mroute-cache
load-interval 60
ip accounting output-packets
ip flow ingress
ip flow egress
ip nat outside
ip virtual-reassembly
ip verify unicast reverse-path
ip accounting output-packets
!
interface Vlan163
description -= VLAN163_LOCAL-LAN-WIC =-
ip address 163.168.1.3 255.255.255.0
ip broadcast-address 163.168.1.0
no ip redirects
no ip unreachables
no ip proxy-arp
no ip route-cache cef
no ip route-cache
no ip mroute-cache
load-interval 60
pppoe enable group global
pppoe-client dial-pool-number 2
!
interface Vlan999
no ip address
shutdown
!
interface Dialer1
description -= Dialer to Rostelecom =-
ip address negotiated
ip verify unicast reverse-path
ip accounting output-packets
no ip redirects
no ip unreachables
no ip proxy-arp
ip mtu 1492
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 2
dialer-group 2
no cdp enable
ppp authentication chap pap callin
ppp chap hostname хххххх
ppp chap password хххххх
ppp pap sent-username хххххх password хххххххх
ppp ipcp dns request accept
!
ip local policy route-map RM_ECHO_CHECK
ip forward-protocol nd
!
ip route 0.0.0.0 0.0.0.0 Dialer1
ip route 0.0.0.0 0.0.0.0 162.168.1.1
ip route 0.0.0.0 0.0.0.0 Null0 255
!
ip flow-top-talkers
top 10
sort-by bytes
cache-timeout 180
!
ip http server
ip http access-class 11
ip http authentication local
no ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip dns server
ip nat translation timeout 900
ip nat translation tcp-timeout 300
ip nat translation pptp-timeout 3600
ip nat translation udp-timeout 60
ip nat translation dns-timeout 10
ip nat translation port-timeout tcp 100 60
ip nat translation port-timeout tcp 25 60
ip nat translation port-timeout tcp 8080 20
ip nat translation port-timeout tcp 80 20
ip nat translation max-entries all-host 200
!
ip nat inside source route-map RM_NAT_ISP1 interface Dialer1 overload
ip nat inside source route-map RM_NAT_ISP2 interface Vlan162 overload
!
dialer-list 1 protocol ip permit
dialer-list 2 protocol ip permit
!
ip access-list extended ACL_ECHO_CHECK_1
permit icmp any host 8.8.4.4 echo
permit icmp any host 77.88.8.8 echo
ip access-list extended ACL_ECHO_CHECK_2
permit icmp any host 77.88.8.7 echo
permit icmp any host 8.8.8.8 echo
ip access-list extended ACL_NAT_ISP1
permit ip 192.168.1.0 0.0.0.255 any
permit ip 192.168.0.0 0.0.0.255 any
permit ip 10.10.10.0 0.0.255.255 any
deny   ip 192.168.0.0 0.0.255.255 10.10.0.0 0.0.255.255
deny   ip 10.10.0.0 0.0.255.255 192.168.0.0 0.0.255.255
deny   ip any any
ip access-list extended ACL_NAT_ISP2
permit ip 192.168.1.0 0.0.0.255 any
permit ip 192.168.0.0 0.0.0.255 any
permit ip 10.10.20.0 0.0.0.255 any
permit ip 10.10.30.0 0.0.0.255 any
permit ip 10.10.40.0 0.0.0.255 any
deny   ip 192.168.0.0 0.0.255.255 10.10.0.0 0.0.255.255
deny   ip 10.10.0.0 0.0.255.255 192.168.0.0 0.0.255.255
deny   ip any any
!
ip sla logging traps
ip sla 1
icmp-jitter 192.168.1.3 source-ip 192.168.0.1 num-packets 3
timeout 100
threshold 10
ip sla reaction-configuration 1 react timeout threshold-type immediate action-type trapAndTrigger
ip sla schedule 1 life forever start-time now
ip sla 101
icmp-echo 77.88.8.8 source-interface Dialer1
timeout 500
frequency 5
ip sla schedule 101 life forever start-time now
ip sla 102
icmp-echo 8.8.4.4 source-interface Dialer1
timeout 500
frequency 5
ip sla schedule 102 life forever start-time now
ip sla 201
icmp-echo 77.88.8.7 source-interface Vlan162
timeout 500
frequency 5
ip sla schedule 201 life forever start-time now
ip sla 202
icmp-echo 8.8.8.8 source-interface Vlan162
timeout 500
frequency 5
ip sla schedule 202 life forever start-time now
!
access-list 11 remark -= Permit HTTP access from Local clients only =-
access-list 11 permit 192.168.1.0 0.0.0.255
access-list 11 permit 10.10.80.0 0.0.0.255
access-list 11 deny   any log
!
no cdp run
!
route-map RM_NAT_ISP1 permit 10
match ip address ACL_NAT_ISP1
match interface Dialer1
!
route-map RM_NAT_ISP2 permit 10
match ip address ACL_NAT_ISP2
match interface Vlan162
!
route-map RM_ECHO_CHECK permit 10
match ip address ACL_ECHO_CHECK_1
set interface Dialer1
!
route-map RM_ECHO_CHECK permit 20
match ip address ACL_ECHO_CHECK_2
set interface Vlan162
!
control-plane
!
alias exec uptime show version | i uptime
alias exec cpu show processes cpu | i CPU
alias exec cpuh show processes cpu history
alias exec cpus show proc cpu sort
alias exec acl show access-lists
alias exec ud undebug all
alias exec sd show debug
alias exec mn terminal monitor
alias exec nm terminal no monitor
alias exec sl show log
alias exec cl clear log
alias exec ct configure terminal
alias exec sr show running-config
alias exec sir show ip route
alias exec sis show interfaces status
alias exec sal show archive log config all
alias exec sia show ip accounting
alias exec cia clear ip accounting
alias exec ipconf show ip interface brief | exclude unassigned
alias exec cflow show ip cache flow
alias exec tflow show ip flow top-talkers
!
line con 0
line aux 0
line vty 0 4
line vty 5 15
!
event manager session cli username "EEM"
event manager applet RELOAD_ISP1
event track 100 state down
action 6.1 cli command "enable"
action 6.2 cli command "configure terminal"
action 6.3 cli command "interface Dialer1"
action 6.4 cli command "shutdown"
action 6.6 cli command "no shutdown"
action 6.7 syslog msg "EEM interface UP"
event manager applet REBOOT
event timer cron name "REBOOT" cron-entry "59 23 * * *"
action 7.1 syslog msg "EEM scheduled reboot device daily in 23:59"
action 7.2 reload
event manager applet CLEAR_NAT_ISP1
event track 100 state any
action 8.1 cli command "enable"
action 8.2 cli command "clear ip nat translation forced"
action 8.3 syslog msg "EEM clear ip nat translation ISP1"
event manager applet CLEAR_NAT_ISP2
event track 200 state any
action 9.1 cli command "enable"
action 9.2 cli command "clear ip nat translation forced"
action 9.3 syslog msg "EEM clear ip nat translation ISP2"
!
end