Jump to content


Dual-homed Internet

routing bgp multipath

  • Please log in to reply
1 reply to this topic

#1 Thomas Pitchford

Thomas Pitchford
  • Members
  • 5 posts

Posted 04 June 2018 - 10:06 AM



I'm having trouble getting my routing correct. I have two separate ISPs configured to work with BGP routing between them. Both ISPs advertise the same address space. The NG sees only one ISP, but there are two. Because the NGs can't handle full routing tables from two ISPs, I had to setup two routers to handle the BGP sessions.


Router 1=

Router 2 =



Currently I'm relying on the VRRP address of the routers, but I've never liked this solution (its there for other services we offer). We're only able to use one ISP for outbound traffic at a time with this topology.


As luck would have it, we recently experienced an issue where ISP 2 was the VRRP master and it went down causing all outbound traffic to stop. ISP 1 was up, but VRRP was never returned to ISP 1. We have other ISPs outside of our BGP, but because the NG saw ISP 1 was up, it never sent traffic to our other ISPs. It was honestly the perfect storm.


My preference is to have traffic go out both ISPs as evenly as possible. I've tried setting up two route statements (with different metrics), but it would never route traffic to our secondary router. I've looked at configuring multipath routing, but the following page says that if one part goes down then the entire multipath route is considered down. And I do need the ability to check the status of the next hop on a given path. https://campus.barra...ipath-routing/ 


Has anyone experienced anything like this and how have you gotten around it? My goal is to send 50% of my traffic to and the other 50% to If that's not possible, then send everything to until the next hop is down, then send to


Thank you.

#2 Michael Zoller

Michael Zoller
  • Barracuda Team Members
  • 209 posts

Posted 05 June 2018 - 09:45 AM

I think this article describes the setup you want to create: https://campus.barra...m/doc/73719017/


The link balancing is configured in the connection object of the access rule: