We have an SRX with two ISP connections. ISP1 and ISP 2. we have a /27 from both of them. Both ISP connections are connected to a switch then trunked to our SRX. On the SRX, we have vlan interfaces with IPs from both of our ISPs. On the SRX, the default route is the gateway of our ISP1 connection. All IPs from ISP1 works.
- interface vlan 101 with public IP 18.104.22.168/27 is not pingable from the outside. (testing with a public ATT router).
- We also have a /24 that is routed to our ISP2's /27 (22.214.171.124) by ISP2 and they are not working either. I created a vlan.102 with IP of 126.96.36.199/24.
- ISP2 connecting is confirmed working fine. Tried plugging in directly to ISPs handoff and using our /27 and /24 range and it is working.
- I think what is happening is because my current default route is sent to 188.8.131.52, when someone pings my ISP2 IP 184.108.40.206, it sends the reply to 220.127.116.11. So there is some assymetric routing there but I wanted to confirm this for anyone that has tried it?
I tried googling around and I saw a post talking about creating a separate routing instance for ISP2. So that i can have a different default route towards 18.104.22.168/27. BGP is out of the question right now, just wondering how to get this working with static routes. Setting a floating static route will not work too because ISP1 needs to go down first before it will use the second gateway which is not what I want.