Solved: cisco 851 + two internet providers

aydanil-ko · ‎11-22-2012

Good Morning,

Can I use cisco 851 as gate for my LAN with two providers ?

Router#sh version
Cisco IOS Software, C850 Software (C850-ADVSECURITYK9-M), Version 12.4(15)T13, RELEASE SOFTWARE (fc3)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2010 by Cisco Systems, Inc.
Compiled Wed 07-Apr-10 20:49 by prod_rel_team

ROM: System Bootstrap, Version 12.3(8r)YI4, RELEASE SOFTWARE

Router uptime is 0 minutes
System returned to ROM by power-on
System image file is "flash:c850-advsecurityk9-mz.124-15.T13.bin"

Whether at least some solution using 851?

shillings · ‎11-23-2012

850 series routers can only handle 5.12Mbps raw throughput (testing based on 64-byte packets): -

http://www.cisco.com/web/partners/downloads/765/tools/quickreference/routerperformance.pdf

Start adding services, such as your firewall, and that will drop even lower.

Also, Cisco ceased doing routine failure analysis on the 851 back in July 2011, so not very good security if you can't keep your firewall software up to date with the latest fixes.

http://www.cisco.com/en/US/prod/collateral/routers/ps380/eol_c51_577880.html

I think you need a new firewall/router.

View solution in original post

shillings · ‎11-23-2012

You need BGP and I don't think the 851 will support it. Cisco's 'Feature Navigator' certainly doesn't list BGP4 as an option for the 851.

871 with 'Advanced IP Services' will though.

Likewise, the 881 with either 'Advanced IP Services' or 'Advanced Security'

cadet alain · ‎11-23-2012

Hi,

it's not mandatory to use BGP, it all depends upon needs.

Regards.

Alain

Don't forget to rate helpful posts.

shillings · ‎11-23-2012

Hi Alain, the OP stated two providers, so wondering how else the inbound traffic could work? I wouldn't want to deal with two sets of public IPs either - not saying it can't be done, but I'd much rather avoid it.

I agree for outbound you don't need BGP.

aydanil-ko · ‎11-23-2012

I need to make a gateway between LAN and the two providers, and configure NAT, DHCP.

shillings · ‎11-23-2012

Are you IPv4 or IPv6? Do you have Provider Independent addressing? Where's your firewall - the 851 or behind? What type of Internet circuits are they?

aydanil-ko · ‎11-23-2012

IPv4

Yes, I have provider independent addressing.

I want firewall on the cisco 851.

My circuits are computer cables 100Mbps.

And I want DHCP server for lan on the cisco 851.

shillings · ‎11-23-2012

OK. What bandwidth will be used on the Ethernet ISP circuits - i.e. 10Mbps bandwidth on a 100Mbps bearer?

Does each ISP provide a wires-only service or do they provide a router (CPE) that sits on your premise?

Are you wanting to load balance across both circuits or just active/standby?

Any budget for new equipment?

aydanil-ko · ‎11-23-2012

Each provider gives ~10-15 Mbps.

Debian pc one of two internet providers allows adjustment

Yes, I want load balance both provider's circuits.

I haven't any budget for buying.

shillings · ‎11-23-2012