LAN Server access with 2 Public IPs

[Sandip Barot]

Hi,

Is it possible to have 2 public IPs from different ISPs point to same internal LAN server IP?

For ex.

ISP1 (175.x.x.1) --> Router1 -->           Switch           <------ Router2 <---- ISP2 (202.x.x.1)

                                                             |

                                                             |

                                                             |

                                                Server (192.168.1.7)

Router1 : ISP Side IP 175.x.x.1 and LAN Side IP 192.168.1.3

Router 2 : ISP SIde IP 202.x.x.1 and LAN Side IP 192.168.1.2

Server : Public IP 175.x.x.7 and 202.x.x.7, Internal IP 192.168.1.7

Static NAT configured on each router to point public IP to internal LAN IP

Issue, here is when I set GW as 192.168.1.2  on the LAN Server then it is accessible with ISP2Public IP  from outside and if 192.168.1.3 then from ISP1 IP and cant access with both IPs at the same time.

Any idea?

Thanks,

[blau grana]

Hello Sandip,

First of, it is not a good idea to hard code default gateway IP. You should use HSRP/VRRP to be able failover if one of internet connection will fail.

Second, do you want to load balance traffic or just use other connection as backup?

If you use second connection only as backup, than configuration is easy. You just configure HSRP to failover and tracking of primary link.

If you want to loadbalance traffic, it would be harder cause I assume that your devices do not support GLBP.

Best Regards

Please rate all helpful posts and close solved questions

[Sandip Barot]

Hi ,

We do not want failover or loadbalance the links. 

We just want to have capability to access the same server with different IPs. ie. some clients can access it with 1 IP while some are given 2nd IP due to some requirements.

Thanks,

[blau grana]

Hello Sandip,

it is possible, but there will be some problems.

Lets say that link ISP1 is primary connection. Customer accessing server via 175.x.x.7 will be always routed via primary link, both outband and inbound traffic. But customers accessing server via 202.x.x.7 will arrive via backup link (inbound traffic) and outband traffic will be routed via primary link -> which will cause asymmetric routing.

Also there is problem if one of this link fail, theese customer will not have any access to server, cause public IP will be inaccessible.

Best Regards

Please rate all helpful posts and close solved questions

[jawad-mukhtar]

If you want to achieve this

If your Server has two Ethernet Ports you can Assign them two Differnet IP and Different Gateway.

or you can assing virtual ip on you server like that.

*** Do Rate Helpful Posts***