Skip to main content
Cruz2019
New Member
February 23, 2021
Question

VIP with different external ip

  • February 23, 2021
  • 6 replies
  • 5320 views
Hello,
I hope you can support or guide me if what I intend to do is possible:
I have a web server with the external ip 187.210.xx.xxx and with the mapped ip 172.16.x.xx, as a VIP, I just hired another ISP, and I want to publish this same server with that external ip so that when my main ISP My server is not working, exit through my secondary ISP.

first of all, Thanks.

    6 replies

    emnoc
    New Member
    February 23, 2021

     

    Q; Are you doing BGP ? 

     

    Q; is the 187.210.x.x/xx advertised to both ISP?

     

    if you answer yes to both then set the vip interface to ANY 

     

    config firewall vip edit "VIP-ANY1" set mappedip "172.16.1.1" set extintf "any" next end

     

    Then run a "diag debug flow" against the target and monitor.

     

    Ken Felix

    SCTG-MS

    Cruz2019
    Cruz2019Author
    New Member
    February 23, 2021

    I do not use bgp, my web server is published only by my main ISP which is 187.210.xx / xx, my intention is to publish it in my second ISP but I do not know how to do it, this in order that when my main ISP fails my secondary ISP take your place automatically so as not to lose the published service,

    emnoc
    New Member
    February 24, 2021

    That would be impossible if your 2nd ISP does not originate the prefix. You could publish 2x VIP one with  x.x.x.x -map-to-server  and y.y.y.y-map-to-server for the webservice services.

     

     

    Ken Felix

     

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!