Route internet traffic over secondary link

[imran_mo]

Hi Experts,

Following is our network

/Chennai\

/ \

/ \

Mumbai<---------------->US

Mumbai-US=Primary Link

Mumbai-Chennai-US=Secondary path

Users in Mumbai are accesssing internet via an internet link in US. We need to router all Internet traffic via the secondary path.

How can we achieve this, I tried pointing the default route in Mumbai towards Chennai, it works for the upstream traffic, but return traffic is coming via primary.

Please suggest.

Thanks,

Imran.

[rais]

You have to make your network route(s) advertised over the Internet more attractive on Chennai-US link.

Thanks.

[sundar.palaniappan]

Imran,

As you can see traffic is bi-directional. You have made changes on the Mumbai end to route outbound Internet traffic via Chennai to USA. I don't know if you are running BGP with the ISP in Chennai. Are you using the same ISP at both Chennai and Mumbai and if you are that improves your chances of influencing traffic coming in. You may want to work the ISP(s) to see if there is anyway they can influence traffic from the USA into your network prefer the Chennai link.

HTH

Sundar

[imran_mo]

Hi,

The links between Mumbai-US, Mumbai-Chennai and Chennai-US are point to point leased lines.

Mumbai subnet-10.8.1.0/24

US LAN SUbnet-10.3.0.0/16

We are also accessing the Citrix servers in US LAN over primary link.

All routing is static.

Imran.

[guruprasadr]

HI Imran, [Pls Rate if HELPS]

If this is the situation in your Office Network, say all Users are accessing the Internet after getting validated at Proxy at US.

Normally, from MUMBAI to US the static will be pointed to Proxy in US to reach directly for HTTP Traffic Validation. In this case, for the failover you can write a static with higher metric for the Proxy IP Segments in US, pointing the traffic to Chennai Internet Router. Since the Chennai Internet Router has direct connectivity to the US and it must have route available for the PROXY Server.

So, for the User's in MUMBAI if the MUM-US fails the traffic will flow via MUM-CHN and to reach the Proxy for having the Internet Access it will go via CHN-US

Hope I am Informative.

Pls Rate if HELPS

Best Regards,

Guru Prasad R

[sundar.palaniappan]

Imran,

We don't have all the information to make the best recommendation to address your routing situation.

Let's say you want all traffic from US to Mumbai (10.8.1.0) to be routed via Chennai then configure a static route in the US router, that terminates the p-t-p links, to point to the router in Chennai as it's next hop. Instead, if you want all traffic between US and India routed via Mumbai with the exception of communication between the 10.3.0.0/16 and 10.8.1.0/24 networks to use Chennai link then you may have to setup policy routing in the US router. PBR provides the flexibility of routing traffic based on several different criteria unlike normal routing which goes by destination address.

HTH

Sundar

[imran_mo]

Sir,

All traffic between the 10 networks needs to be on the primary link.

Users in 10.8.1.0 subnet are accessing the internet from the customer network, we dont have any proxy address, just the default route,the routing to internet is done within the 10.3 network not managed by us. Our demarcation is the US router which is the gateway for 10.3 network to our network.

All traffic the is destined to the internet and is coming back from the internet needs to be on the secondary link.

I agree with you idea of using PBR, not sure how I'd filter the internet traffic though.

Thanks for helping.

Imran.