08-28-2022 08:08 AM - edited 08-28-2022 11:20 AM
I want to be able to configure a Cisco C1100 ISR to support two different WAN circuits. Currently, all traffic from sourcing from the inside subnet 172.31.254.x/24 is directed to a default route to gig0/0/0. I am testing out a DIA proof of concept where all guest traffic sourcing from 192.168.31.x/24 will traverse to the local internet connection going out gig0/0/1 at the C1100.
The intent is to create a guest wireless network so users will access the guest SSID configured on the 3702 AP that is managed by the WLC in flexconnect and get an IP address from the C1100 router from a DHCP Pool on the 192.168.31.x/24 subnet with the default gateway of 192.168.31.1 (This is the provider) where the traffic will be passed onto the Internet connection at the store.
The new connection on gig0/1 will be outbound only from 192.168.31.x/24 subnet
08-28-2022 08:21 AM
you can use PBR (policy based routing) for this requirement. one sample is https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_pi/configuration/xe-16-5/iri-xe-16-5-book/iri-pbr.html
commands may slightly different. if these commands not working check for specific configurations related to 1100 router
08-28-2022 08:38 AM
Check some PBR examples: (ignore if you are not required to fail over.)
https://www.balajibandi.com/wp-admin/post.php?post=1643&action=edit
08-28-2022 08:45 AM
Need Both Advertise specific Prefix via PE for Inbound
and also use PBR for outbound.
08-28-2022 03:30 PM
Hello
sounds like as suggested by othersyou need to policy route the wifi network via gig0/1 however this doesn’t mean the return traffic will comeback the same way so to remedy that you could as-prepend egress the wifi network on the gig0/0 bgp peer also do the same for all other networks egress on gig0/1 bgp peer
08-28-2022 03:45 PM
Hmm, don't know if your 1100 support VRF, but if it did, that might be an alternative to PBR.
One reason I suggest VRF, as I suspect you want to really keep you guest Internet traffic, security wise, separate from your corporate traffic, VRF likely is better suited for that goal.
BTW. if you're not too familiar with VRF, its sort of the L3 equivalent of L2 VLANs.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide