I want to load share traffic for my two network segments. I have two routers with each internet circuit running BGP with two different ISPs(ISP- A & ISP-B). Also running IBGP between two routers. Since i have two /24 segments(not provided by ISP) so i want one segment to prefer via ISP A & other segment to prefer via ISP B. I have configured EBGP & IBGP and configured AS-path prepend but i see some asymmetric behaviour. Source traffic which prefer via ISP -A is going via it but incoming traffic is via ISP-B.
Pls suggest how this asymmetric behaviour could be fixed.
Hi. Pls see below config. I have ASA configured with ip x.x.x.5 so while tracing from firewall to another location public ip(USA) trace goes to router-A via ISP-A. But when do trace from USA to ASA it goes through ISP-B.
It seems the subnets X.X.X.X and Y.Y.Y.Y are located behind the firewall.Since firewall doesnt support PBR,all traffic from firewall has to choose hsrp ipaddress as the next hop ipaddress and then it select only the active router to exit,eventhough the incoming traffic select diffrent routers to reach these network as per the configuration. In this scenario using PBR in router would not be appropriate but still there is some work around for replacing the PBR in Firewall using destination policy nat which may make the configuration little bit complicated.
the below one describes about the ASA configuration.Careful about IOS version http://www.packetu.com/2011/11/28/egress-interface-selection-on-the-cisco-asa/
My concern is how to correct incoming traffic as you can see X.X.X.X traffic is being prefered on router A towards ISP-A and hence incoming traffic for X.X.X.X should arrive through Router A only but its not happening same. Incoming traffic arriving through ISP B.
What configuration should i do to remove this asymmetric behaviour.
Hi everyone, I would like to thank you in advance for any help you can provide a newcomer like myself!
Im studying the 100-105 book by Odom and am currently on the topic of Port security. I purchased a used 2960 and I'm trying to follow a...
While deploying a number of 18xx/2802/3802 model access points (APs), which run AP-COS as their operating platform. It can be observed on some occasions that while many of their access points were able to join the fabric WLC withou...
I am going to design and build an LAN network under a tunnel underground with long distance between the switches.
I will have 2 Catalyst switches and 8 Industrial IE3000, and they will be connected with fiber.
For now I am planning on use Layer-2 s...