Cisco 2911 Router to configure (2)ISP ADSL connection

[darksilver26]

Hello cisco enthusiast i would like to ask help from you guys on what will be the work around on this configuration.

currently we have a Lease Line connection on serial interface

ISP <=SERIAL=>Router 2911<=ACCESS MODE=>Firewall(DATA DHCP SERVER located here, policy implemented here)<=TRUNK MODE=>CORE Switch(VLAN Assignment is here)<=TRUNK MODE=>ACCESS Switch(DATA and VOICE passess thru each ports)

refer to the scenario on the attachement:

router code:

ip ssh version 2

!

track 1 ip sla 1 reachability

!

track 2 ip sla 2 reachability

!

!

!

!

interface GigabitEthernet0/0

description *** LAN ***

ip address 192.168.1.1 255.255.255.0

duplex full

speed 1000

!

interface GigabitEthernet0/1

description *** WAN Link to ISP1 ADSL ***

ip address 192.163.0.2 255.255.255.0

shutdown

duplex auto

speed auto

!

interface GigabitEthernet0/2

description *** WAN Link to ISP2 ADSL  ***

ip address 192.163.1.2 255.255.255.0

duplex auto

speed auto

!

interface Serial0/0/0

description *** WAN Link to  Lease Line  ***

ip address

!

ip forward-protocol nd

!

ip http server

ip http access-class 23

ip http authentication local

ip http secure-server

ip http timeout-policy idle 60 life 86400 requests 10000

!

ip route 0.0.0.0 0.0.0.0 192.163.0.2 track 1

ip route 0.0.0.0 0.0.0.0 192.163.1.2 100

what i want to happen is that, my internal network will have only 1 static public address so that i CAN connect on my network from that ip address. such as webservers, security camera's etc..

with lease line i have 6 public ip address to use. and all of the has 1 gateway.

while on ADSL 1 only have 1 Static IP address.

how can i configure my router to do this?

i am thinking to create a DHCP pool on the router to where my firewall should point to and from the DHCP pool it will point the internal network going to public network..

can you help me understand this?

I want to implement load balancing and failover on this network.

ISP 1  has a higher bandwidth than ISP 2

ISP 1 when down. ISP 2 will be full blast. vice versa.

thank you

[Peter Paluch]

Carl,

A couple of questions to better understand your needs.

what i want to happen is that, my internal network will have only 1  static public address so that i cant connect on my network from that ip  address. such as webservers, security camera's etc..

I do not entirely understand. You write: "so that i cant". Should it be "so that i can"?

In addition, why do you want your internal network to be represented by a single static public address?

with lease line i have 6 public ip address to use. and all of the has 1 gateway.

I do not understand this statement. An IP address does not have a gateway. Gateways are assigned to hosts, not to IP addresses. Can you perhaps explain this in different words?

Do I understand you correctly that what you want to achieve is that you will have a single identical public IP address accessible via all three ISPs (two ADSLs and one leased line) that will be used to access your internal network? If that is the case then I am afraid that won't be possible. The IP addresses assigned to you depend on your ISP, and each ISP uses its own address space.

Best regards,

Peter

[darksilver26]

Do I understand you correctly that what you want to achieve is that you will have a 
 single identical public IP address accessible via all three ISPs (two ADSLs and one leased line)
 that will be used to access your internal network? If that is the case then I am afraid that won't be possible. The IP addresses assigned to you depend on your ISP, and each ISP uses its own address space.

Our Lease Line ISP had given us 6 usable IP Addresses which all can be connected on the Client side WAN IP/Gateway is.

IP Address 1 point directly on the EDGE Router which is the Cisco 2911 Series.

IP Address 2 point directly on the UTM based Firewall(not on transparent mode)

for me to access internal network via a remote software. im accessing the internal PC/SERVER/DVR via the IP Address 2.

Change of ISP Provider:

Lease Line will be down and 2 ADSL Line will be up

ISP 1 ADSL is now currently up directly connected to the WAN port of the Firewall because i tried to load balance ADSL with the LEASE LINE. whenever i shutdown the LEASE LINE  serail port on the router. internal network disconnected because the gateway of the firewall is thru the lease line. what i want to achieve hopefully and possibly

ISP 1(x.x.x.x)                                <===Firewall==>

                      CISCO 2911 Router                         <=TRUNK MODE=>Core Switch<=TRUNK Mode=>ACCESS SW

ISP 2(x.x.x.x)                               

how can i established a connection between router and firewall that both ISP will be passing thru 1 IP only? so that i can still remote internal network PC/SERVER/DVR thru the firewall

thank you