setting a different Internet connection for different users

Posted on 2011-05-02
Last Modified: 2012-05-11
I have two different Internet connections and I want one group(s) of users to use connection A (T-1) and another group(s) to access the internet thru connection B (7 Mb DSL)  Currently, everyone uses the T-1 thru an ISA server.  I just had the DSL installed and want to migrate my exchange server and a small group of users to the DSL circuit.
Question by:gordytech
    LVL 30

    Expert Comment

    do you use a switch as the best way is use a vlan and setup the different internet connection on the other vlan you will need both internet feeds in to the switch and your switch needs the ability to do it so if your switch does not have 2 wan ports you might needs one that does I mean my home draytek can do that so its not hard
    LVL 3

    Accepted Solution

    There are many ways to do this, including some WAN routers that can accept two different ISPs and route accordingly. . .

    Let me suggest a way that doesn't lock you into any proprietary solution -- the concept is to break out the two different groups hosts into different subnets / VLANs, allow a direct route between them, but use different default gateways out.

    This can be done a few different ways, let me illustrate two:

    1) Use two different "Layer3" switches (Ethernet switch with basic routing functionality):
      a) One switch houses the Excahnge server, select users, and the DSL modem.  Default gateway = DSL
      b) Second switch houses everyone else and the ISA server.  Default gateway = T1 router
      c) Connect a routing link between the two switches and configure static routes to the opposite subnet over this link

    2) Use a Layer3 switch that supports policy-based routing, for example:
      a) Put Exchange and select users into VLAN 10
      b) Put other users into VLAN 20
      c) Set the default gateway for the Layer3 switch to the T1 router
      d) Set a policy-route so that anything from VLAN 10 *not* headed for VLAN 20 has a next-hop of the DSL router.

    The above is conceptual and a bit over-simplified, let me know if we're heading in the right direction.

    - Dani

    Author Comment

    thanks, Dani - I think that is exactly what I am needing.  

    My network (designed and implemented by someone else 5 years ago) has 19 VLANs, using 8 stacks of DELL powerconnect 3448 switches, some stacks have 3 or 4 switches, a couple of them have only one.  Since we have less than 400 devices on the LAN, it would seem that 19 VLANs is quite a few too many.  In a month or so, i am hoping to reduce the number of VLANs to three and use just one large subnet instead of 20.  Since I am new to VLANs, this may be challenging, but in the long run it will make everything much simpler and more easy to manage.
    LVL 33

    Expert Comment

    This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.

    Featured Post

    Why do Marketing keep bothering you?

    Is your marketing department constantly asking for new email signature updates? Are they requesting a different design for every department? Do they need yet another banner added? Don’t let it get you down! There is an easy way to manage all of these requests...

    Join & Write a Comment

    Import PST to Exchange using Power Shell new-mailboximportrequest command, you can simply import the PST file into Exchange mailbox or archived. To know How to import PST into Exchange  2013 read the complete article.
    Is your computer hacked? learn how to detect and delete malware in your PC
    In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…
    To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…

    745 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    14 Experts available now in Live!

    Get 1:1 Help Now