topic Re: Assigning a seperate internet connection to a certain vlan in Network Security

Assigning a seperate internet connection to a certain vlan

msaeed — Mon, 21 Feb 2022 17:40:15 GMT

I wanted to ask if it is possible if I can assign an internet connection/link from our main one to use it for a certain VLAN so that users that VLAN could have a better browsing internet speed. Equipment are: Catalyst 9407 Core Switch, FPR 1150 , Cisco

Re: Assigning a seperate internet connection to a certain vlan

balaji.bandi — Mon, 21 Feb 2022 19:12:35 GMT

Please clarify, you have how many internet connection ?

Are you looking single internet connection you want to priority for VLAN IP address to be better speed compare to others ?

or you have 2 Internet connection you want to route Certail VLAN to different ISP ?

Re: Assigning a seperate internet connection to a certain vlan

msaeed — Mon, 21 Feb 2022 20:51:17 GMT

Thank you for your relay.

I have 2 Internet connections I want to route Certail VLAN to different ISP.

Re: Assigning a seperate internet connection to a certain vlan

balaji.bandi — Tue, 22 Feb 2022 00:22:03 GMT

I am in the impression you have FTD and FMC so check below :

https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/217588-configure-pbr-with-ip-slas-for-dual-isp.html

https://www.youtube.com/watch?v=MKcSBTJ55e8

if you are using FDM, i have not worked on FDM, so google can help you.

Re: Assigning a seperate internet connection to a certain vlan

msaeed — Tue, 22 Feb 2022 10:37:02 GMT

let me give you more explanation about my scenario, I don't want to configure it as a failover. in my internal network, I have multiple VLANs.I have one VLAN for high management and i have multiple ISPs. I need to assign ISP1 for VLAN2 for example.

Re: Assigning a seperate internet connection to a certain vlan

balaji.bandi — Tue, 22 Feb 2022 10:53:13 GMT

Sure that is where PBR come in to Play, its not necessary you need to to Fail over. (that is optional you want it or not)