02-27-2018 03:05 AM - edited 03-05-2019 09:59 AM
Hi,
I want to implement bgp with two different ISP's with two routers. Wan side is ok but how can be the design for local interfaces? Should we make HSRP or something else? Any design guide for local side?
I'm using different firewalls in the local side of the bgp routers.
Thanks
02-27-2018 04:16 AM
Hi from local LAN point of view you can implement HSRP or VRRP between routers terminate the WAN links , can you clarify that by giving network topology or diagram ..
waiting your reply
02-27-2018 04:36 AM
02-27-2018 04:44 AM - edited 02-27-2018 04:46 AM
Hi,
If your routers are Cisco Product then HSRP is a good solution for you if you don't want to use both ISP (Yes it is possible through HSRP to use both ISP but you have to configure two different default gateway for your firewalls its not a good design) and If you seeking the solution to load balancing also then go with GLBP.
Regards,
Deepak Kumar
02-27-2018 04:45 AM
you can configure HSRP between R1 and R2 Now the network between R1, R2 and Fw1, Fw2, FW3 will be the same subnet to achieve redundancy lets assume the subnet is : 192.168.1.0/24
R1 192.168.1.1 R2 192.168.1.2 Virtual IP : 192.168.1.254 , FW1: 192.168.1.3, Fw2: 192.168.1.4, Fw3: 192.168.1.5
configure HSRP between tow routers R1 and R2 and configure default route on each firewall at virtual ip this will work fine with you , policy will deal with the Virtual IP
i hope this is clear for you
02-27-2018 04:49 AM
OK hsrp is a good solution I think we will not use load balance. So how should be the hsrp config, should we use bgp tracking with hsrp so If ISP2 bgp goes down r1 will be active for hsrp configuration? Or ibgp?
02-27-2018 04:57 AM
@blackswans wrote:
OK hsrp is a good solution I think we will not use load balance. So how should be the hsrp config, should we use bgp tracking with hsrp so If ISP2 bgp goes down r1 will be active for hsrp configuration? Or ibgp?
yes you are right , now as per my understanding you are looking for load balance for outgoing traffic , so go through GLBP Protocol , just google it basic configuration.
for inbound traffic go through bgp protocol , modify the attribute to achieve that.
02-27-2018 05:00 AM
Hi,
For understanding the HSRP and configuration follow the below link:
Regards,
Deepak Kumar
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide