Alternate/Backup Internet connection

[ihingos]

Hello all,

Attached is a diagram of our network. Currently we're fully-meshed with MPLS between sites (A, B, C, and D) and a link out to the Internet (ISP1). However were looking to add an additional internet connection (ISP2).

We use BGP at each site to talked to the service provider, and on top of that are multi-point VPNs that are routed with OSPF.

The BGP AS is not public, and we have a a /25 IP assignment from each ISP.

What would be the best way to setup the new internet connection to allow for some load balancing, but more importantly, fail-over for the sites?

[tcordier]

Do you want to use a primay/backup setup for Internet, or load-sharing between the two ISP? Next question would be if you want your Internet traffic also be encrypted or not?

If you want primary/backup and do not want to encrypt your Internet traffic, you could inject a second default route in the BGP (VRF) table at your service provider, and specify a local preference for each of the then two default routes (I assume that you currently route your Internet traffic to your ISP by injecting a default route into BGP).

- thomas