Two ISP configuration on L3 Switch

[VIkrant1984]

Hello All,

I need help to configure Two ISP configuration on Cisco L3 Switch, i have 60 User so it should be devide 50-50 %,
Please help me to configure it be low is my configuration and rougly draw diagram

ip route 0.0.0.0 0.0.0.0 XX.XX.XX.246
ip route XX.XX.XX.131 255.255.255.255 XX.XX.XX.130
ip route XX.XX.XX.144 255.255.255.248 XX.XX.XX.130
ip routing
interface 1/1
name "to_isp"
exit
interface 1/2
name "TO_ISP_02"
no power-over-ethernet
exit
interface 1/21
disable
name "to_FW_INTER_02"
exit
interface 1/22
name "to_FW-Inter_02"
exit
interface 1/23
name "to_FW_INTER_01"
exit
interface 1/24
name "to_FW_INTER_01"
exit
ip address 10.203.131.57 255.255.255.0
ip default-gateway 10.203.131.1
member 1
ip address dhcp-bootp
exit
exit
vlan 3010
name "ISP_01_WAN_100"
untagged 1/1
tagged 1/21-1/24
ip address 172.24.204.245 255.255.255.252
exit
vlan 3011
name "ISP_01_100M"
untagged 1/5
tagged 1/3-1/4,1/12,1/21-1/24
ip address 117.205.9.129 255.255.255.248
exit
vlan 3012
name "ISP_TCL_WAN_200"
untagged 1/2
tagged 1/21-1/24
ip address 123.252.253.82 255.255.255.252
exit
vlan 3013
name "ISP_TCL_LAN_200M"
tagged 1/21,1/23
ip address 114.143.50.65 255.255.255.240
exit

[akg7]

Hello,

Are you configuring this on Aruba switch or in CISCO switch?
If Aruba then which device?

Can you share connectivity diagram and where are you facing issue?

Thanks!

[VIkrant1984]

Thanks for ur reply.
Im trying it on Aruba S2930 switch

[akg7]

Hello @VIkrant1984 ,

Thank You for your reply.

Is interface 1/1 & 1/2 connecting to ISP1 & ISP2?

Interface 1/1 & 1/2 should be tagged in respective ISP vlans.

Can you share connectivity diagram and where are you facing issue?

Thanks!

[VIkrant1984]

Hi AKG,

Thanks for the reply please check draw diagram https://ibb.co/SJTX9RC, I just want to terminate both ISP in switch with faiolver / load balance or any suitable and better connfiguration so all user should enjoy both line

[akg7]

Hello @VIkrant1984 ,

I believe you are lloking for load balancing /High Availability into same switch which is difficult to achieve here.

And if you will go with BGP option for preference of one ISP to another at a same time then load balancing might be difficult.

Also ISP should have BGP connection towards Aruba 2930 switch.

Below is the link for Routing Guide for ArubaOS-Switch:

https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=a00091308en_us

Thanks!

[VIkrant1984]

Hello AKG,

Thanks for clarification,

What else if I dont want HA / LB, Now I just want termicate both Internet line in switch, 
Presently I can access ISP-1 Internet from Interface 21 & 24, (VLAN 3011)
How to access ISP-2 Internet from Interface 22 & 23 (VLAN 3013)

I just need this configuration, 

[akg7]

Hello @VIkrant1984 ,

First thing in Aruba/Procurve switches Tagged=Trunk Port and Untagged=Access Port

I have tested below setup in LAB and working for me.

I am assuming that ISP 1 is also has VLAN 3010 and ISP 2 has VLAN 3012 and they are passing traffic towards 2930 via trunk port.

ISP has to give below routing:
ISP 1:
ip route 0.0.0.0 0.0.0.0 XX.XX.XX.245

ISP 2:
ip route 0.0.0.0 0.0.0.0 XX.XX.XX.82

You have to do following changes into 2930 switch:

ip route 0.0.0.0 0.0.0.0 XX.XX.XX.246 -->Default route towards ISP 1
ip route 0.0.0.0 0.0.0.0 XX.XX.XX.81 -->Default route towards ISP 2
ip routing
interface 1/1
name "TO_ISP_01"
exit
interface 1/2
name "TO_ISP_02"
no power-over-ethernet
exit
vlan 3010
name "ISP_01_WAN_100"
tagged 1/1 -->Changed it to Trunk port
tagged 1/22,1/24 -->If these are tunk port then its fine and if these are Access port then change it to 'Untagged'
ip address XX.XX.XX.245 255.255.255.252
exit
vlan 3011
name "ISP_01_100M"
untagged 1/5 -->Verify if this is a access port or trunk port
tagged 1/3-1/4,1/12,1/22,1/24 -->Verify if this is access port or trunk port
ip address XX.XX.XX.129 255.255.255.248
exit
vlan 3012
name "ISP_TCL_WAN_200"
tagged 1/2 -->Changed it to Trunk port
tagged 1/21,1/23 -->If these are tunk port then its fine and if these are Access port then change it to 'Untagged'
ip address XX.XX.XX.82 255.255.255.252
exit
vlan 3013
name "ISP_TCL_LAN_200M"
untagged 1/6 -->Verify if this is a access port or trunk port
tagged 1/21,1/23 -->If these are tunk port then its fine and if these are Access port then change it to 'Untagged'
ip address XX.XX.XX.65 255.255.255.240
exit

I hope this will help you.

Thanks!

[akg7]

Hello @VIkrant1984 ,

Has my post helped you to answer your query?

Thanks!