I believe that what you have configured will work (sort of) but has several issues that you might want to address.
- it is certainly possible that the ISP will specify a different AS number and that is an easy change.
- what you are doing uses HSRP to control which router is used for outbound traffic. If there is a problem on Ether1 of R1 then R2 becomes the HSRP active router and sends traffic. But you are prepending the BGP advertisement from R2 so the ISP will continue to send traffic to R1.
- You have not told us much about R4 but configuring HSRP suggests that R4 will just forward traffic to the HSRP virtual address. You might want to think about running a dynamic routing protocol between R1, R2, and R4. You are already running IBGP between R1 and R2 so it would be easy to configure Local Preference in R1 so that it is the preferred router for routes learned from the ISP and R2 becomes the backup. Then if there is a dynamic routing protocol between R1, R2, and R4 it will allow R4 to determine whether it should forward to R1 or to R2.
Unfortunately, ISP designate only one for me his AS number
I want to do uses HSRP to control which router is used for outbound traffic and it is that you write:If there is a problem on Ether1 of R1 then R2 becomes the HSRP active router and sends traffic. But first of all I want to secure my network when R1 will broken then R2 can send traffic to ISP
I would like to R2 will be backup router for router R1 (similarly in firewall ASA's failover)
Also for the router R4 gateway is virtual IP address (R4 is Cisco ASA)
Router R4 is only gateway for the private LAN network before this router and yes, R4 will just forward traffic to the HSRP virtual address. Also you have good idea about dynamic routing protocol. How can I configure Local preference in R1?
ad a) Main goal is eliminated weak point in my Network - in this scenerio is R1 because in case when R1 broke then my LAN network don't work, don't have access to the Internet so I decide to add new router (in this scenerio is router R2) - it is similiar to situation in Cisco ASA- In this devices we can configure failover.
Answered on your point - You suggest that use standby track Fa0/0 it is not good idea? If I will use some remote IP reachable in my opinion it not work how we want because all traffic is forwarded to ISP router (it is one devices from ISP side) For example:
So if R2 will become main router in my network I still don't have access to the Internet - but we do not needto worry about thisbecausethis is notmyissue
I only secure my network if R1 broken then R2 become main router.
Mayby we can track internal interface on router R1 (R1 --> switch SW1) ?
Answer 2 on your question : Are both your lines terminated on the same router on the provider side? - YES EXACTLY, both lines are terminated on the same router ISP (it is one device)
I don't say standby track Fa0/0 it is not good idea. But it might fail in some scenarios: Just imagine the BGP session fails for some reason but your Fa0/0 interface remains Up?
IMHO, in your topology the best way would be to configure some track pinging some loopback address on the ISP router advertised by BGP to you. You can block this particular prefix on your iBGP session on R1. So in that case you would recieve this prefix only via eBGP from yyur ISP. In a case the eBGP session would fail on R1, the track would decrease its HSRP priority and R2 would become Active in HSRP, i.e., it would take the default GW role.
So all you need for such a solution is an agreement with your ISO he will advertise some loopback IP to you.
We have 3 identical switches configured by someone else and would like to claim some of the Gigabit ports(G1/G2/G3/G4) for use on servers. When we try to change the wiring and configuration, we run in to connectivity issues. Attached is a des...
This is actually a pretty cool feature, i didn't even know it existed until I was looking for a solution to advertise a subnet (prefix in BGP talk), only if a certain condition existed. This is exactly what conditional advertisements does
j ai une question j ai achete un routeur cisco 887VA-k9 , je le configuré avec la configuration ci- dessous
si je le lier avec mon pc portable sur l un de ses ports directement ça marche toute est bien ( la connexion internet + m...