Second Gateway and PPPoE

Reply

Second Gateway and PPPoE

Hi all

I'm in trouble whit this scenario:

- Internet connection by PPPoE protocol with 1 static IP (ie 3.3.1.205)

- additional 8 public IP like: 3.3.3.0 to 3.3.3.7 with 3.3.3.1 as gateway

- Internet connection on ethernet1/1

- internal LAN on ethernet 1/8 set with IP 192.168.80.254 (and LAN 192.168.80.0/24)

- Web Server on ethernet 1/5 = 192.168.50.254 (and LAN 192.168.50.0/24)

I use a default virtual router from 0.0.0.0/0 to ethernet 1/1 and LAN works great.

But how can configure firewall to set the second gateway for my web server connecter to ethernet 1/5? This IP has to go outside by the 3.3.3.1 gateways...

 

Thank you very much to all for support

 

Maurizio

 

 

L7 Applicator

Are there 2 ISP on the same link or does your ISP provide you with 1 static and 1 subnet on the same link?

 

there are several solutions

1.

If the second ISP is on a different link, you can sinply create a policy based forwarding rule that redirects all outbound connections from your webserver out to 3.3.3.1

for inbound connections you will need a second PBF rule that redirects inbound connections from the 3.3.3.1 isp to your webserver, that has symmetric return enabled and pointing to 3.3.3.1, so sessions in both directions go in and out the same interfaces

2.

use a second VR and connect the 3.3.3.1 subnet and webserver interfqce to it (that way it will work out of the box), then add routes

- defaultVR 192.168.50.0/24 nexthop newVR

-newVR 192.168.80.0/24 nexthop defaultVR

 

 

Tom Piens - PANgurus.com
Like my answer? check out my book! amazon.com/dp/1789956374

Hi @reaper 

 

The ISP provides me 1 static and 1 subnet on the same link

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!