Dual ISPs and PBF

[m_virk]

Hi

I have 2 ISPs on my PA  3220. I need to set it up in a way so our core traffic passes through ISP1 and guest WIFi and other non-critical traffic passes through ISP2. Also I need to make ISP2 as my backup ISP if ISP1 goes down. I have read about creating 2 VRs anfd setting up PBF but not too sure how to accomplish this fully.

[BPry]

@m_virk,

From what you've explained it doesn't sound like you have any reason to utilize dual VR if this is all you are trying to accomplish. For the ISP failover you would want to utilize a static route with path monitoring to remove the primary link if the path goes down; the Guest traffic is a simple PBF configuration.

Dual ISP with Static Route Path Monitoring 

PBF Documentation

[m_virk]

@BPry

I am also trying to accomplish VPN automatic failover along with dual ISP, that's why I was thinking to deploy dual VR since vpn traffic originating from firewall can't be controlled using PBF.

[BPry]

@m_virk,

That makes more sense with the design that you listed originally; without that piece of information the addition of a secondary VR doesn't really make sense. So what exactly are you getting stuck on when you try and configure/design this? What part of the configuration do you actually need help with?