How to set up multiple VLANs and multiple ISP's on Cisco 2811 - not for redundancy
Posted on 2011-05-02
I have a cisco 2811 with 4 VLAN's on it
VLAN 1 = data vlan
VLAN 10 = Voice VLAN
Vlan 250 = partner company
VLAN 254 = guest
Currently this all works beautifully with one ISP, everyone goes out same interface (FE 0/0), VLAN 254 is rate limited, VLAN 250 is restricted to only certain parts of network, like one server for File/print sharing.
The partner company on VLAN 250 is complaining about our websense so they wanted their own connection. I ordered a completely separate circuit (on FE 0/1) with 5 static IPs and want to now route VLAN 250 and VLAN 254 over this connnection. With VLAN 250 being still able to connect to certain resources on VLAN 1.
My boss says this is not possible unless I put in complicated policy routing statements and I should just use a linksys router for this new connection. He says that I cannot have two default routes but I thought I could use route-maps. I think he's wrong but I'd like ammo to back it up before I go to bat. Wouldn't I just set up a route-map like
access-list 100 permit ip host 192.168.250.0 0.0.0.255 any
route-map VLAN-250 permit 10
match ip address 100
set ip default next-hop <new static IP>
Obvioulsy I would also set up an ACL on FE 0/0 to deny 192.168.25.0 to any resources (via ports) except the ones they need, like file/print sharing and I would think an ACL on FE 0/1 to deny VLAN 1 and VLAN 10 from accessing but my boss says that these get applied after the route is set up.
Please experts - HELP!
Would there be an issue with