cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3742
Views
0
Helpful
16
Replies

Dual ISP connections on router

Networksupport4
Level 1
Level 1

Hello,

 

Can we terminate 2 different ISP (e.g. 10+10 Mbps) on one router to achieve 10 Mbps in load sharing/load balancing and high availability both ?

 

Option 1: - Internet connectivity

Option 2: - Point to Point connectivity (leased link)

 

16 Replies 16

Jaderson Pessoa
VIP Alumni
VIP Alumni

Hello,

 

You cant do it 10mbps+10mbps from different ISP that have differents IP range to work with 20mbps, you can use it in high availability using VRRP, HSRP or GLBP, but the links wll working independenly

Jaderson Pessoa
*** Rate All Helpful Responses ***

You certainly ought to be able to connect 2 ISP on a single router for the user network. How it would for for load sharing/balancing or for failover depends on some things that we do not yet know about this situation. Does the user network have its own Provider Independent IP Address Space or is it using IP Address Space assigned from 1 ISP, or is it using IP address space assigned from 2 ISP? Will the connections to the ISP use a dynamic routing protocol, or will it use static routing? Once we know these things we will be better able to give good advice. 

 

I do not see how VRRP, or HSRP, or GLBP would be used for a single router connecting to the ISPs.

 

HTH

 

Rick

HTH

Rick

you has right, i do not understood his question. Thanks for this bit point.

Jaderson Pessoa
*** Rate All Helpful Responses ***

You are welcome. The original question seems at first to be quite simple (connecting 2 ISP on a single router). And when we have quite simple questions we tend to make assumptions based on our experience and to provide answers that reflect those assumptions. But when you look carefully at the original question you recognize that there is much that we do not know, and that prevents us from giving good advice at this stage. Once we find more information from the original poster we will be in better position to advise them.

 

HTH

 

Rick

HTH

Rick

Thanks Richard for answering.

 

We are still in process to procure link with ISP for our spoke office connectivity, but we have decided to go for Point to point link only. Requirement is to use, two links (on single router) from different ISPs with separate backbones in aggregated way. (to use both the link active-active)

 

in Layer 3 connectivity's, ISP provides its own /30 subnet for b2b peering between CE and PE. which would be different addressing.

in Layer 2, ISPs just provider a Layer 2 connection to connect sites with each other.

 

I have attached a file with scenario showing both the link option. Please let me know if any questions, I would appreciate if a valid workable solution can be provided.

 

 

 

I have looked at your scenarios. You show your ISR routers but do not show the ISP routers. It might be useful if you had shown the ISP equipment. Your scenario 2 show a point to point layer 2 link from the branch to HQ. In the drawing it looks reasonable. But if you insert the ISP equipment into the drawing then I believe that it gets problematic. How would you have a layer 2 connection from the branch to the branch ISP to the HQ ISP to HQ? I believe that your scenario 1 with layer 3 links from ISP will work much better.

 

As I mentioned before there are things about your environment that we do not know and which impact how you would set up the connection for the second ISP connection.

- will you want to use static routes or run a dynamic routing protocol?

- do you have your own provider independent IP address space? Or are you using IP addresses assigned from your ISP?

- you will need to do address translation on each of the interfaces connecting to ISPs for traffic going to the Internet. This will enable traffic from the branch LAN to traverse the Internet. It would not enable traffic initiated from the Internet to get to your LAN. Would this be a problem?

- To simplify communication between your branch LAN and HQ LAN you might want to consider configuring a tunnel connecting the branch and HQ. That would enable traffic to flow between sites without requiring address translation for that traffic.

 

HTH

 

Rick

HTH

Rick

Joseph W. Doherty
Hall of Fame
Hall of Fame
Although a second ISP link can perhaps avoid an issue with one ISP taking down your Internet connectivity, there can be much more you might do for HA. For example, HA often avoids using only one router unless it's a higher end model that provides hardware redundancy in the "box", and even then, the chassis itself can be a single point of failure. Even with a router that provides hardware redundancy, or multiple routers, depending on the level of HA you're attempting to achieve, a single site can be a single point of failure, and that's not limited to your site. For example, when using two ISPs how do the links physically run? Could a single back-hoe cut both links? Do both links terminate at the same POP? And so on.

Regarding load sharing, most routing protocols will support static ECMP (equal cost multiple path) load sharing. Which means, if the router has multiple equal cost paths to the same destination, it will round robin (egress) flows across the multiple paths. However, the router does not normally take into account actual link load or issues with a link. For example, a link could be saturated or encountering a high level of corruption of frames/packets on the link, and the router would normally just keep directing flows to that link.

The one Cisco technology that I'm aware of that can perform dynamic load balancing and/or move traffic off links having issues is Cisco's PfR (Performance Routing). This technology is available on many of Cisco's routers, although I believe it may often require a license upgrade to use it.

PfR can do a wonderful job of balancing egress, and although it has some support for ingress balancing, that's takes much more to support. Often, though, if you control both sides of a network, the other side's egress may balance out the far side's ingress. However, when using general Internet (working with hosts on the Internet, not under your control), you often have few to zero options for ingress load balancing.

Thanks for talking this alot of thinking on my question.

Actually we are not procuring any internet connectivity, we are going for a point to point private connection between two of our offices.

 

inorder to maintain redundancy, we are taking 2 links from 2 independent ISPs inplace of 1 link, we would like to use them with link aggregation to use complete bandwidth.

Our plan is to bundle the links through a Layer 3 port channel on both ISR routers, and then make a OSPF neighbourship between them. Then configuring IPSec over GRE to secure the connectivity.

 

Is it a workable solution ?

 

 

 

Thank you for the additional information. Good to know that this is not for Internet access but is to be only a point to point layer 2 connection. Layer 3 port channel on ISR is an interesting approach. Note this statement from Cisco documentation about using port channel on ISR routers

The purpose of the EtherChannel feature is to provide redundancy between ISR and another device and not to provide scalable bandwidth between them.

So Cisco is not claiming that you will get 20 meg of bandwidth utilization.

 

You can use this link to find additional information which you may find helpful

https://www.cisco.com/c/en/us/td/docs/routers/access/1900/software/configuration/guide/Software_Configuration/etherchannel.html

 

A layer 3 port channel running OSPF would make sense and would advertise subnets between the sites. Since it will be a private point to point I am not sure that you would need GRE or ipsec.

 

HTH

 

Rick

HTH

Rick

"The purpose of the EtherChannel feature is to provide redundancy between ISR and another device and not to provide scalable bandwidth between them."

For many ISRs, that makes a lot of sense, as often most ISRs do not have the performance capacity to handle even one high speed LAN link. (The 4K ISRs, with boost license, and depending on model and actual LAN link bandwidths, might be able to support a dual Ethernchannel at wire rate.) Further, unlike switches, I don't recall ISRs offering any options for Etherchannel load balancing.

If you're working with different ISPs, you're "bundling" options narrow. Again, PfR is one of the few technologies that is "smarter" about balancing traffic even with different paths with different "costs" to the same destination.

"Is it a workable solution ?"

Typically, a GRE tunnel is considered one flow, and generally, most balancing technologies will not split a flow. If you have more than one tunnel, then it's possible different tunnels could be directed to different paths, but again, most balancing technologies don't take into account any actually link loading. I.e. two tunnels might be directed to the same link. (When you have lots of flows, usually they are distributed across you multiple paths, and at least in long term, load sharing tends to be somewhat equal across multiple paths.)

References to PfR and to flows reflect a layer 3 orientation. The original poster has been fairly clear that they want to treat the ISP connections as layer 2. My previous response was that EtherChannel is supported on ISR and would be an interesting approach. The more I think about it the more I worry that it might not be very workable. EtherChannel assumes that the layer 2 links included in the channel provide equivalent forwarding behavior. And in normal implementations within a single site that is generally the case. But I wonder about the links running through 2 different ISP. Will this really provide equivalent end to end forwarding behavior?

 

HTH

 

Rick

HTH

Rick

"References to PfR and to flows reflect a layer 3 orientation."

Agreed.

"The original poster has been fairly clear that they want to treat the ISP connections as layer 2."

Oh? My original reading, and re-reading, I was under the impression OP was open to L2 or L3 for the links. Whatever would allow an effective load balancing. Most likely, with different ISPs, any kind of "bonded" L2 is not an option.

Certainly the early posts in this discussion were open to both layer 2 and layer 3 solutions. It was my interpretation that as they described wanting to implement port channel that they were indicating a change to focus on layer 2 solutions. But as I re-read the entire discussion they do not really say that they shifted away from the possibility of layer 3. So we need some clarification from the original poster.

 

HTH

 

Rick

HTH

Rick