directing inter-routed vlans to ISP gateway

[Nopimoozz]

                   I have created vlans on layer 2 switches by using router on stick and the see each other, but after that i want these vlans to use another gateway to go to the remote branch, please how can i do that

[jawad-mukhtar]

You can use PBR.

Route-map PBRA

match ip address (ACL A)

Set Ip Next Hop (Another Gateway Remote Branch)

Route-map PBRB

match ip address (ACL B)

Set Ip Next Hop (Another Gateway Remote Branch)

In ACL A

1 deny ip (subnet A ) (subnet B)

2 permit ip (subnet A) any

in ACL b

1 deny ip (Subnet B) (Subnet A)

2 permit ip (Subnet B) any

Apply Router Map

PBRA to Subinterface A

Apply Router Map

PBRA to Subinterface B

*** Do Rate Helpful Posts***

[Wilson Bonilla]

Hello Moe.

The easiest way is to create a static route, so keep all the configuration as it's right now. And then use the following commands to add a static route pointing to the remote branch.

configure terminal

ip route [ branch-network ] [ next-hop_ip-address ]

The branch-network will be the subnet in the remote site you want to reach from the local router.

Next-hop_ip-address is that gateway you want to use to reach the remote location.

There's a requirements, this next-hop ip address must be reachable from the local router.

Regards.

Wilson B

[Nopimoozz]

Thank you Jawad and Wilson for your help .

       I feel little bit confused because Im a beginner, and I would like to explain more details .

1.the router on stick has only one interface and i have created sub interfaces for the inter-routed vlans .

2 .I have 3 switches layer 2 running 3 vlans mgmt-vlan, data-vlan and servers-vlan in the ip 172.16.x.x /24 with gateways (.1)

3. I have a ISP gateway router with one interface to vpn over fiber (to the other branch) in the range 10.111.x.1 and I have no access to it and I did not connect it to network yet.

4.the remote gateway branch is 10.111.x.1

would you please guys guide me to make these vlans reach the ISP gateway router and see the remote branch.

do I need more interfaces on the router on the stick ?

should I connect the ISP router to the switch or add another interface on the router on the stick and connect it to the ISP.

thank you again for your response .

moe

[jawad-mukhtar]

You mean that other branch public ip is 10.111.x.14.  You have Site to Site VPN to that branch.