Re: Adding 2nd ISP to Cisco 9300 - Page 2

chueymtz · ‎08-29-2022

I have a Cisco 9300 that currently uses our century link as our primary isp we recently got a Comcast Business modem and wanted to add this as a secondary to the same router. I’m a little confused as I’ve never done this before, so I assign the Comcast ip to the port that I plug the it into on the Cisco? They gave us 5 static ips 79.91.208.64 to 69. Any help would be much appreciated. But I noticed none of the static ips from our century link are assigned to any of the ports.

chueymtz · ‎09-01-2022

Hello,

So we have dual isp setup in our checkpoint firewall but for some reason the way we are setup once the century link goes down (this was configured for the 3560 with vlan interface address) redundancy does not work because there is no internet. I am trying to add the comcast router to the 3560 and configure it similar to the centurylink side that is working but I'm not getting anywhere. I will post my config.

chueymtz · ‎09-01-2022

Building configuration...

Current configuration : 4163 bytes
!
! Last configuration change at 14:21:02 UTC Thu Sep 1 2022
! NVRAM config last updated at 14:21:03 UTC Thu Sep 1 2022
!
version 15.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
service call-home
!
hostname 3560-CX_HQ_ASA_GATEWAY
!
boot-start-marker
boot-end-marker
!
!

!

no aaa new-model
system mtu routing 1500
call-home
contact-email-addr sch-smart-licensing@cisco.com
profile "CiscoTAC-1"
active
destination transport-method http
no destination transport-method email
!
!
!
!
ip routing
no ip cef optimize neighbor resolution
!
!
!
vtp mode transparent
!
!
!
!
!
!
!
crypto pki trustpoint TP-self-signed-250562432
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-250562432
revocation-check none
rsakeypair TP-self-signed-250562432
!
!
crypto pki certificate chain TP-self-signed-250562432
certificate self-signed 01
30820229 30820192 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 32353035 36323433 32301E17 0D323030 38313331 33323935
385A170D 33303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F
532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3235 30353632
34333230 819F300D 06092A86 4886F70D 01010105 0003818D 00308189 02818100
B736125A 86F49BF2 BED9C23C 80E1D279 46BC6A24 75367AF2 96AC7CB7 9A567899
654F4E51 58D0B7AD 27A329DD E9B420D0 81BF8D56 F79C8DB8 F3C9163B 9DFA3804
0D5EA318 84D65AB0 079DB3F7 6F7AAA9B 12C0037E 2B09503F F91570DC 3FEECF92
E7EADD2C 09D1C734 B101869A CD7B7B6E 31D99194 F856117B C5EA0E65 88F5BD07
02030100 01A35330 51300F06 03551D13 0101FF04 05300301 01FF301F 0603551D
23041830 168014B9 9CF06E82 8AB6BEF7 39ACCCD8 836ABAEF C0C20530 1D060355
1D0E0416 0414B99C F06E828A B6BEF739 ACCCD883 6ABAEFC0 C205300D 06092A86
4886F70D 01010505 00038181 00412B6E BF1C6513 91A964CB 4C06DB36 74DC9A21
412553FC D1B2344F 52281FAB 2F991F6D 6C497BF8 F31F02E4 792EDE7B 82A95FFC
13D78D6E AB8D132A 9E14D1C6 8999B6B8 52775498 C3488592 7456DDD6 8B170C63
E813B2AF 0B556CA2 D763E3CF 4C6C1567 A7D3CCE9 448FDF4F EA3A0C6A 6CD934EB
DD241478 43AA3E5E 413640F1 32
quit
!
spanning-tree mode pvst
spanning-tree extend system-id
!
!
!
!
vlan internal allocation policy ascending
!
vlan 2
name Comcast
!
!
!
!
!
!
!
!
!
!
!
!
interface GigabitEthernet0/1
description connection to Internet
no switchport
ip address 65.x.x.86 255.255.255.252
!
interface GigabitEthernet0/2
description to Comcast Router
no switchport
ip address 73.x.x.x 255.255.255.248
!
interface GigabitEthernet0/3
!
interface GigabitEthernet0/4
!
interface GigabitEthernet0/5
switchport mode access
!
interface GigabitEthernet0/6
switchport mode access
!
interface GigabitEthernet0/7
switchport access vlan 2
switchport mode access
!
interface GigabitEthernet0/8
switchport access vlan 2
switchport mode access
!
interface GigabitEthernet0/9
!
interface GigabitEthernet0/10
!
interface GigabitEthernet0/11
!
interface GigabitEthernet0/12
!
interface Vlan1
ip address 74.x.x.233 255.255.255.248
!
interface Vlan2
ip address 70.x.x.67 255.255.255.248
!
ip forward-protocol nd
!
!
ip http server
ip http secure-server
ip route 0.0.0.0 0.0.0.0 65.x.x.85
ip route 0.0.0.0 0.0.0.0 73.x.x.1
!
!
access-list 46 permit 185.189.149.184
access-list 46 permit 185.189.151.235
access-list 46 permit 89.248.173.131
access-list 46 permit 185.158.251.126
access-list 46 permit 185.212.47.166
access-list 100 permit ip 0.0.0.1 255.255.255.248 any
access-list 110 permit ip 0.0.0.3 255.255.255.248 any
!
!
route-map ISP-B permit 10
match ip address 110
set interface GigabitEthernet0/2
!
route-map ISP-A permit 10
match ip address 100
set interface GigabitEthernet0/1
!
!
!
line con 0
line vty 0 4
access-class 46 in
privilege level 15
login local
transport input telnet ssh
line vty 5 14
access-class 46 in
login
line vty 15
login
!
!
end