Daul ISP and specific ISP routing

[Mort2k]

Good Afternoon All

I have read the various methods for Dual ISP configuration and they make sense. I could not find one last detail and I was hoping someone here could help.

Desired Configuration:

ISP 1 = Active for outbound traffic during normal operations.

ISP 2 = Inactive

1 Client IP on the internet network to have its traffic routed out via ISP 2

Basically the IP phone system needs to use ISP 2 all the time, but we need all other client to use ISP1 unless ISP is down.

Hope this makes sense.

Thanks

[aleksandar.astardzhiev]

Hey @Mort2k ,

Probably couple of ways to achieve what you want, but here is what I will do if I were you:

- Create to separate virtual-routers (VRs), one for each ISP

- Create default route for each VR to respective ISP with enabled path monitor for each route

- If possible directly connect the IP phone VLAN to the firewall and assign it to the second VR, so both ISP2 and IP phone VLAN to be in the same VR.

- Create source NAT rules to translate IP phones traffic to public IP from ISP2 and all other traffic with public IP from ISP1

-------

At this point you should have internet access for IP phone system from ISP2 and internet access for all other systems over ISP1

- Create second default route for each VR pointing to "next-vr" with metric higher than the primary default route

- Create NAT rules for IP phone system to translate source with address from ISP1 and all other systems with address from ISP2

(Note: if you use same security zone for both ISPs, you should use "destination interface" in addition to destination zone, when defining the NAT rules. If you use different zone, you don't have to define dest interface)

----

Above should allow you to automatically failover any service to backup ISP provider if there are any issues with primary ISP (path monitor will disable the preferable route to ISP and FW will use the next-vr and use the ISP from the other VR as backup internet access.