topic Re: PBF on 2 internet links on same ISP in General Topics

PBF on 2 internet links on same ISP

kyr-jha — Wed, 04 Jul 2012 17:34:27 GMT

Hi,

I would like use PBF to secure and share 2 internet links (same ISP)

When I configure public IP on the PA interfaces I have an error due to LAN overlap.

the primary link

eth4 x.y.z.99/24

the second

eth3 x.y.z.185/24

the ISP gateway is x.y.z.254 same for both links.

my lan interface eth2 192.168.2.82/19

my VR :

0.0.0.0/0 eth4 next hop IP x.y.z.254

How can I configure my PAN ?

thanks

Re: PBF on 2 internet links on same ISP

mikand — Wed, 04 Jul 2012 21:50:01 GMT

Is it possible for you to get two linknets from your ISP, like RFC1918 based such as:

link1: 10.0.0.0/30 (you are .1 and ISP is .2)

link2: 10.0.0.4/30 (you are .5 and ISP is .6)

Re: PBF on 2 internet links on same ISP

jdelio — Thu, 16 Aug 2012 20:41:13 GMT

I guess the question here is what exactly are you attempting to accomplish here?

The purpose of PBF with 2 different ISP's is if 1 ISP/link goes down, then you can switch over to the second connection.

When you have 1 ISP and 2 separate IP's.. ??

Are you wanting to do this for redundancy? If so, why not setup Aggregate interfaces. And then NAT if you want to use different IP's to perform different functions.

I hope this helps a little.

Re: PBF on 2 internet links on same ISP

kyr-jha — Tue, 28 Aug 2012 07:39:17 GMT

Hi,

I'm come back from holidays 😉

to mikand : my problem is that in this conf we can make a good test for pbf.

but I thank you,

to jdelio :

before I leave I've made a configuration but your suggestion is very interesting.

Unfortunatly, I don't know when we be able to plan a test because now we are on production on these links.

My conf is based on DHCP split; make a PBF for a half and used the default route for other people.

and a secondary default route with a greater metric.

bye,