topic Second Gateway and PPPoE in General Topics

Second Gateway and PPPoE

Maurizio_Nosella — Wed, 25 Nov 2020 21:44:46 GMT

Hi all

I'm in trouble whit this scenario:

- Internet connection by PPPoE protocol with 1 static IP (ie 3.3.1.205)

- additional 8 public IP like: 3.3.3.0 to 3.3.3.7 with 3.3.3.1 as gateway

- Internet connection on ethernet1/1

- internal LAN on ethernet 1/8 set with IP 192.168.80.254 (and LAN 192.168.80.0/24)

- Web Server on ethernet 1/5 = 192.168.50.254 (and LAN 192.168.50.0/24)

I use a default virtual router from 0.0.0.0/0 to ethernet 1/1 and LAN works great.

But how can configure firewall to set the second gateway for my web server connecter to ethernet 1/5? This IP has to go outside by the 3.3.3.1 gateways...

Thank you very much to all for support

Maurizio

Re: Second Gateway and PPPoE

reaper — Thu, 26 Nov 2020 14:22:23 GMT

Are there 2 ISP on the same link or does your ISP provide you with 1 static and 1 subnet on the same link?

there are several solutions

If the second ISP is on a different link, you can sinply create a policy based forwarding rule that redirects all outbound connections from your webserver out to 3.3.3.1

for inbound connections you will need a second PBF rule that redirects inbound connections from the 3.3.3.1 isp to your webserver, that has symmetric return enabled and pointing to 3.3.3.1, so sessions in both directions go in and out the same interfaces

use a second VR and connect the 3.3.3.1 subnet and webserver interfqce to it (that way it will work out of the box), then add routes

- defaultVR 192.168.50.0/24 nexthop newVR

-newVR 192.168.80.0/24 nexthop defaultVR

Re: Second Gateway and PPPoE

Maurizio_Nosella — Thu, 26 Nov 2020 19:00:46 GMT

Hi @reaper

The ISP provides me 1 static and 1 subnet on the same link