Like I mentioned the easiest way is to utilize PBR based on the PAT or NAT
address you provide for that user or group/dept out of your Corporate
Firewall.
If you have a both internet connections going into a single router it is
the easiest way. If you have separate routers for each internet router you
will need a Layer 3 device "switch -or- router" switch would be better to
intercept the traffic as is moves from the outside interface of your
Firewall towards your Internet Edge routers. The Switch or routing device
would look at the address of the translated Dept and make a SRC based
decision. Are you an address from DeptA if yes you go out to ISPA, if you
are SRC address of DeptB you go out of ISPB interface. the same kind of
logic works for 1router 2 ISP's or 2routers 2 ISP's. The firewall has to
either have a private IP range between the outside and edge routers, or
separate Public blocks will work as well. If this still doesn't make sense
let me know.
On Tue, Nov 11, 2014 at 2:36 PM, Imran Ali <immrccie_at_gmail.com> wrote:
> In my case i have a seperate router terminating this dedicated
> internet connection. 1921
>
> I created a sepeate vlan for such department .
>
> On Nov 11, 2014 4:59 PM, "IGMPv9" <cciegroupst_at_gmail.com> wrote:
> >
> > Dear Gurus
> >
> > I hope this email finds you well
> >
> > I have a question for you ..
> >
> > I have an Enterprise that has an Internet Connection however one of my
> > departments (IT) needs a separate internet connection from a specific
> > Provider..
> >
> > how can I achieve this ..
> >
> > I.E. the Enterprise has its own internet connection except the IT
> > department which needs its own connection.
> >
> >
> > I appreciate your solutions and explanation to that as well..
> >
> > BR
> >
> >
> > Blogs and organic groups at http://www.ccie.net
> >
> > _______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
Blogs and organic groups at http://www.ccie.net
Received on Tue Nov 11 2014 - 17:24:26 ART
This archive was generated by hypermail 2.2.0 : Mon Dec 01 2014 - 07:15:32 ART