Load balancing Static addressed DSL Lines on 2621

[bmcgrathPIX]

I need to find a solution to load balance/failover 2 dsl lines with the following scenario...

Here is a description of the setup:

DSL modem with a block of statics goes into a 2621 with 2 interfaces presently (in/out, router has access lists applied to in/out), this then goes into a PIX515, which had 3 interfaces (in/out/DMZ), then goes into lan switch (the pix is the gateway). I want to get a second static addressed DSL line from another ISP, and load balance/failover the 2 lines. i have enough room to add ethernet modules or whatever to the 2621, and would think that would be the first step.

my question is:
A. what do i need to make this work
B. how does this work in a nutshell
c. what is this called, and how do i tell the smartnet guys who help me set this up that this is what i need (smartnet because i am assuming this is difficult)
d. any other idea on how to do the above solution?


Bryant McGrath, MCP/MCSA/MCSE/CCNA

 

[nyy1023]

Bryant,
All those certs and you are not sure how to set this up?!?!?
just kidding
Well, one simple solution would be to set up two network segments.
What I mean by this is to have to seperate blocks of IP's, or subnet the current block you are routing. Then either set your network up for half of the traffic to use each segment. Then add static routes out each connection with metrics.
192.168.0.0 255.255.255.128 serial0/0.1
192.168.0.128 255.255.255.128 serial 0/0.2 10
this is one connection

192.168.0.128 255.255.255.128 serial0/0.1
192.168.0.0 255.255.255.128 serial0/0.2 10

This is the other. You can do the same thing by using route-maps if you like.

What you are doing is setting up some form of load balancing, and also setting up your failover. Your ISP will just add the 192.168.0.0 255.255.255.0 to their routing table to allow routing and there you go!

There are other ways of doing this, but this is the simplest form of config and will give you what you want. Internally you will need to set up something to tie the two connections together, either via a switch or two ports on your PIX.

 

[bmcgrathPIX]

Ha...CCNA doesnt cover this! (Thank God for Tek-tips!)anyway, I will look into this further. I appreciate the help!

Bryant McGrath, MCP/MCSA/MCSE/CCNA

 

[baddos]

If I am reading your question right, you only have 2 IP addresses?

Anyways.... Something like this

ip route 0.0.0.0 0.0.0.0 1.1.1.1 'First DSL Line
ip route 0.0.0.0 0.0.0.0 1.1.1.3 'Second DSL line
interface fastethernet0/0
ip address 1.1.1.2 255.255.255.252
interface fastethernet0/1
ip address 1.1.1.4 255.255.255.252

You'll need your ISP to have both routes going down both lines, but yes it is possible. Now.... Two ISPs is a different story.

 

[bmcgrathPIX]

Yep. Our current ISP is unreliable at best. We want to have 2 different ISP's. I also am considering putting Symantecs firewall 200 with load balancing in front of the router, but that product doesnt support enough users. I would prefer to use 2 WAN interfaces on the 2621, but How would i get two seperate ISP's to list routes for the other?

any Ideas?

 

[baddos]

Do you host any websites, or mail?

 

[bmcgrathPIX]

Yes. Mail and Web.

 

[baddos]

Well... You'll have to setup redundant DNS entries for each website and email server. One DNS uses ISP1's IP, the other uses the other ISP's IP.

 

[nyy1023]

Most ISP's will route any IP address block for you if you are running BGP? If you are running static routes that is a different story. However, I believe you are talking about two seperate routes with two different ISP's. This will require your own AS to be multi-homed. This will give you redundancy as well as failover.
As far as DNS I do not know what the question is so I cannot point you in the right direction.