How to make best Use of our TWO ISPs

Cisco / 3560
May 19, 2010 at 03:47:13
Specs: Windows XP

I need advice on how to make use of the two
Internet accesses we have/need.

Now we have two separated networks that we
need to join. We'll use different VLANs and
we'll route them with the Cisco 3560. Now the
doubt, is how do we have to configure the two
Internet connections because a small group of
computers need to use a different ISP.

Do we have to route the internet access on the
3560?. We have a firewall (Zyxel ZyWALL
USG200) with two WAN connections, and I
don't know what would be easier.

Is this the best configuration?:

| |
Other switches

Thanks a lot,


See More: How to make best Use of our TWO ISPs

May 19, 2010 at 07:06:44
How about putting the computers that require a separate external (Internet) connection into one VLAN and the rest in another? Is that a possibility?

If not, you may have to create a third VLAN just for the group that requires the separate internet.

You didn't give us much detail on the segmentation of the networks by subnet (VLAN) which is why I'm asking the above.

As far as the physical setup of your equipment, that looks good.

Report •

May 19, 2010 at 08:03:42
How many servers/pcs are we talking here?

If under 254 there is never a need to subnet in addition to vlans.

Since one of your requirements is to have two gateways, one for the small group and one for the rest, unless the firewall router can also be a dhcp server with two subnets/gateways you will need an additional firewall for the small group.

In this case the config would look like so

isp1______ isp2
^ ________ ^
Vlan switch

Report •

May 26, 2010 at 04:56:06
Thank you very much for your comments !

Yes, I believe I can put all the different Internet ISP computers
in their own VLAN, that would be easier. Then the GW for the
computers in the VLAN will be the router in, and the rest will be in a different VLAN.

We have only 45 computers and 5 will need the different
Internet connection.

I'll have to add a SBS2008 with the Exchange soon. Do you
recommend to put it in a different VLAN?, this SBS2008 box
will be the domain controller and DHCP server for all the LAN,
I guess I'll have to use the ip-helper command to be able to
provide autentication and ip addresses to the clients right?

Thanks again!

Report •
Related Solutions

Ask Question