We help IT Professionals succeed at work.
Get Started

need BGP config help for a Cisco 3560 Switch

tabush
tabush asked
on
1,051 Views
Last Modified: 2012-05-12
Hi
i am setting up a new ISP connection and need some help.
The ISP will give me a /24 (2.2.2.0/0) with 2 links (to 2 different routers of theirs, going out 2 different telecom circuits) and then both of those will connect to my Cisco 3560G switch. They said to use BGP to connect to them.

They are my only ISP and yes i'm only using 1 switch on my end.

Here's the setup and info they gave me:

Link 1:  
ISP IP 1.1.1.209/30
My IP 1.1.1.210
My port # GigabitEthernet0/25

Link 2:
ISP IP 1.1.1.213/30
My IP 1.1.1.214
My port # GigabitEthernet0/27

AS # 65533

The IP's for my equipment are 2.2.2.0/0 (WAN IP's)
then i will have 3 different firewalls connected, each for a separate network.
GIgE0/3 will be 2.2.2.3/25
GigE0/5 2.2.2.129/28
GigE0/7 2.2.2.145/28


as of now the config i have is as follows:
----------
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname wan-primary
!
boot-start-marker
boot-end-marker
!
no aaa new-model
system mtu routing 1500
ip routing
!
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
interface GigabitEthernet0/1
description TempManIP
no switchport
ip address 192.168.37.22 255.255.255.0
!
interface GigabitEthernet0/2
!
interface GigabitEthernet0/3
description ToDC1FW1
no switchport
ip address 2.2.2.3 255.255.255.128
!
interface GigabitEthernet0/4
!
interface GigabitEthernet0/5
description ToDC1FW2
no switchport
ip address 2.2.2.129 255.255.255.240
!
interface GigabitEthernet0/6
!
interface GigabitEthernet0/7
description ToDC1FW3
no switchport
ip address 2.2.2.145 255.255.255.240
!
interface GigabitEthernet0/25
description ToISP-1
no switchport
ip address 1.1.1.210 255.255.255.252
!
interface GigabitEthernet0/26
description ToISP-2
no switchport
ip address 1.1.1.214 255.255.255.252
!
interface GigabitEthernet0/27
!
interface GigabitEthernet0/28
!
interface Vlan1
no ip address
!
router bgp 65533
bgp log-neighbor-changes
neighbor 1.1.1.209 remote-as 65533
neighbor 1.1.1.213 remote-as 65533
no auto-summary
!
ip http server
ip http secure-server
!
!
!
logging esm config
!
!
!
line con 0
line vty 0 4
password xxxx
no login
line vty 5 15
password xxxx
no login
!
end
----------------




i have been told that a few small things are left out - can anyone help me?
again the only things i need to make sure that work are:
1. the switch can get out to the internet
2. if the link on G0/25 fails, it picks up via G0/27 within a few seconds
3. each of my firewalls (ports 3,5,7) can get to the internet. The firewalls will be configured 1 IP higher than the respective port, and will look at the port's IP for it's default gateway.

 The ISP doesn't want to help me unless i pay them for 4 hours of labor... and I know enough to say that this doesn't take 4 hours.

thanks!!!
Comment
Watch Question
This problem has been solved!
Unlock 3 Answers and 16 Comments.
See Answers
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE