Comcast Business Static IP to Cisco to Firewall

chueymtz · ‎01-17-2024

I am trying to setup my router to sla so that when my comcast isp is down my secondary ip will take over. I am having issues because my comcast although I pay for 5 static ip's I am unable to put into bridge mode per comcast. I'm not sure what I would need to use for wan and static route for it to work. The static ip's i have from comcast are 70.91.x.65-69 with .70 being the gateway. How do I go about setting this up to my cisco port? This cisco is before the firewall so the static ip's are configured in the firewall. Any ideas or has anyone had an issue like this? I asked comcast for the wan ip but they tell me to use the gateway of .70 which doesn't work.

MHM Cisco World · ‎01-17-2024

can you more elaborate and share topology

MHM

chueymtz · ‎01-17-2024

Here is what I have keep in mind the comcast port 1/0/2 isn't working, I can't get comcast to work going thru this edge router and it can not be put in bridge mode.

Comcast ISP

Static IP's: 70.x.x.65-69 /29

Subnet Mask: 255.255.255.248

Per Comcast use 70.X.X.70 as gateway

HQ_9300_EDGE#sho run
Building configuration...

Current configuration : 12056 bytes
!
! Last configuration change at 20:01:20 UTC Wed Jan 17 2024
!
!
!
license boot level network-advantage addon dna-advantage
!
!
diagnostic bootup level minimal
!
redundancy
mode sso
!
!
!
!
crypto engine compliance shield disable
!
!
transceiver type all
monitoring
!
track 1 ip sla 1 reachability
!
!
!
!
!
!
!
!
!
!
!
!
interface GigabitEthernet0/0
vrf forwarding Mgmt-vrf
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet1/0/1
description to ISP to Firewall
no switchport
ip address 4.x.x.169 255.255.255.248
!
interface GigabitEthernet1/0/2
description Comcast
no switchport
ip address 70.x.x.67 255.255.255.248
!
interface GigabitEthernet1/0/3
!
interface GigabitEthernet1/0/4
!
interface GigabitEthernet1/0/5
!
interface GigabitEthernet1/0/6
!
interface GigabitEthernet1/0/7
!
interface GigabitEthernet1/0/8
!
interface GigabitEthernet1/0/9
!
interface GigabitEthernet1/0/10
!
interface GigabitEthernet1/0/11
!
interface GigabitEthernet1/0/12
!
interface GigabitEthernet1/0/13
!
interface GigabitEthernet1/0/14
!
interface GigabitEthernet1/0/15
!
interface GigabitEthernet1/0/16
!
interface GigabitEthernet1/0/17
!
interface GigabitEthernet1/0/18
!
interface GigabitEthernet1/0/19
!
interface GigabitEthernet1/0/20
!
interface GigabitEthernet1/0/21
!
interface GigabitEthernet1/0/22
!
interface GigabitEthernet1/0/23
!
interface GigabitEthernet1/0/24
!
interface GigabitEthernet1/1/1
!
interface GigabitEthernet1/1/2
!
interface GigabitEthernet1/1/3
!
interface GigabitEthernet1/1/4
!
interface TenGigabitEthernet1/1/1
description connection to Internet Circuit
no switchport
ip address 4.x.x.142 255.255.255.252
!
interface TenGigabitEthernet1/1/2
!
interface TenGigabitEthernet1/1/3
!
interface TenGigabitEthernet1/1/4
!
interface TenGigabitEthernet1/1/5
!
interface TenGigabitEthernet1/1/6
!
interface TenGigabitEthernet1/1/7
!
interface TenGigabitEthernet1/1/8
!
interface FortyGigabitEthernet1/1/1
!
interface FortyGigabitEthernet1/1/2
!
interface TwentyFiveGigE1/1/1
!
interface TwentyFiveGigE1/1/2
!
interface AppGigabitEthernet1/0/1
!
interface Vlan1
no ip address
!
ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
ip route 0.0.0.0 0.0.0.0 4.x.x.141 track 1
ip route 0.0.0.0 0.0.0.0 70.x.x.70
!
!
!
ip sla 1
icmp-echo 4.x.x.141 source-interface TenGigabitEthernet1/1/1
frequency 5
ip sla schedule 1 life forever start-time now
!
route-map ISP2 permit 10
match ip address 101
match interface GigabitEthernet1/0/2
!
route-map ISP1 permit 10
match ip address 101
match interface GigabitEthernet1/0/1
!
!
!
control-plane
service-policy input system-cpp-policy
!^C
!

Georg Pauwen · ‎01-17-2024

Hello,

I am not clear on your topology, can you post a schematic drawing that shows the connections ?