ā02-15-2024 12:09 AM
hi
I have 2 VLANS one for marketing ,the other for human resources if I want to each one to have an ISP I have a switch and a router + 2 public IP one for isp1 and the other for isp2 is it enough just for access list i searched a lot people seems to be talking about the route map i don't understand what is the need for it, ofc am doing PAT overload on the public IPS will this work or do I need something else other then the access list and pating also am using static routing between my router and isp router am i missing anything ?
keep in my mind this is in a cisco packet tracer
Thanks in advance
Solved! Go to Solution.
ā02-15-2024 12:18 AM
You need PBR
Why?
The traffic arrive to router and router use RIB to forward the traffic,
But the RIB check only the destination the traffic go on not source from where this traffic come
Here we can not use RIB to make router forward vlan1 to isp1 and vlan2 to isp2 hence we use pbr
In pbr we use extend acl
Match vlan1 to any then set next hop isp1
Match vlan2 to any the set next hop isp2
In simple words
PBR check both source and destination
RIB check destination only
MHM
ā02-15-2024 12:18 AM
You need PBR
Why?
The traffic arrive to router and router use RIB to forward the traffic,
But the RIB check only the destination the traffic go on not source from where this traffic come
Here we can not use RIB to make router forward vlan1 to isp1 and vlan2 to isp2 hence we use pbr
In pbr we use extend acl
Match vlan1 to any then set next hop isp1
Match vlan2 to any the set next hop isp2
In simple words
PBR check both source and destination
RIB check destination only
MHM
ā02-15-2024 12:33 AM
Thank u so much I really appreciate the help.
ā02-15-2024 01:00 AM
check below example with the steps with failover option.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide