Skip Links

Network World

Brad Reese

How Cisco IOS NAT can be used to enable enterprise multihoming

By Brad Reese on Mon, 07/14/08 - 8:10pm.
Newsletter Signup

Cisco How-To Tutorials

An enterprise may want to connect to the Internet through multiple Internet Service Providers (ISPs) for fault tolerance and load balancing.

At this point, the routing overhead these enterprises impose on the Internet routing system become more significant.

This is because routers in the Internet's default-free zone are required to maintain a route for every multihomed enterprise connected to multiple ISPs and this does not provide adequate scaling.

While RFC 2260 describes an address allocation and routing scheme for multihomed enterprises with good scaling properties, it also has drawbacks.

It requires renumbering part of an enterprise when the enterprise changes one of its ISPs.

The ability of an enterprise to distribute load across multiple connections to ISPs is largely determined by the address assignment inside an enterprise.

This makes load distribution rigid and adds complexity to addressing schemes used inside an enterprise.

To resolve the issue with RFC 2260, use Cisco IOS Network Address Translation (NAT).

This provides scalable routing for multihomed, multi-provider connectivity.

NAT replaces IP addresses in the packet header with different IP addresses.

Cisco IOS NAT is more enhanced with the Application Layer Gateway (ALG) feature.

ALG is intelligent enough to automatically scan the addresses and port numbers carried in the payload of the packets and set up translations automatically.

The ALG feature for the Domain Name System (DNS) protocol allows Cisco IOS NAT to enable the multihoming of enterprises.

ALG avoids the renumbering of hosts in the enterprise when changing ISPs.

ALG also allows load distribution without depending on the address assignment scheme inside the enterprise.

The enterprise border routers that connect to the ISPs need to be configured with Cisco IOS NAT.

The ALG feature for DNS inspects the DNS query and response messages that cross the NAT device.

It also modifies the addresses in those messages and sets the translations between original and modified addresses.

When an enterprise changes its ISPs, it only requires that the NAT configuration be changed on the border router.

This is done to use the new block of addresses and the enterprise hosts can still use the originally assigned addresses.

In addition, the load is distributed among multiple connections based on the border router through which the initial DNS query was sent.

Therefore, load distribution can be achieved by using multiple DNS servers and enabling different hosts in the enterprise to use different DNS servers.

This can be automated through DHCP configuration.


View more Cisco How-To Tutorials

Contact Brad Reese
http://www.BradReese.Com

Brad's Top 5 Story Picks
# 1. Cisco vs. Nortel: Who's the customer support champ?
# 2. Cisco consummates agreement with legendary reseller CXtec
# 3. Cisco resume tips
# 4. Silver lining in Cisco stock decline: Tough times help Cisco gain market share
# 5. Cisco takes $78M haircut on VMware investment
Story Archives Brad Reese on Cisco Story Archives

Cisco VoIP Gateways

Cisco Power Supplies

Cisco Aironet Wireless

Cisco Refurbished Inventory Availability

  

Welcome, visitor. Register Log in
About Brad Reese on Cisco

Brad Reese cofounded BradReese.Com Cisco Refurbished, which enables affordable networks globally by assuring customer satisfaction with guaranteed one year warranties on both Cisco Repair as well as Refurbished Cisco.

Don't be shy, contact Brad Reese online or call him Toll Free:

866-864-0506

International callers may wish to call Brad by dialing:

850-364-4115

Archives
November 2009
October 2009
September 2009
August 2009
July 2009
June 2009
May 2009
April 2009
March 2009
February 2009
January 2009
December 2008
November 2008
October 2008
September 2008
August 2008
July 2008
June 2008
May 2008
April 2008
March 2008
February 2008
January 2008
December 2007
November 2007
October 2007
September 2007
August 2007
July 2007
June 2007
May 2007
April 2007
March 2007
February 2007
January 2007
Categories
A classic scam to defraud Cisco's SMARTnet program
America's Best profile written by Useem regarding Chambers' success
Avian Securities Senior Telecom Research Analyst - Catharine Trebnick
Breakingviews.com correspondent - Robert Cyran
CCIE
Careers
Charlie Giancarlo - Managing Director of Silver Lake Partners and Skype investor
Cisco
Cisco ASR 9000 architecture
Cisco ISR G2 Module Support
Cisco Integrated Services Router Generation 2 (ISR G2) Model Comparison
Cisco Integrated Services Routers Generation 2 Portfolio
Cisco Unified Communications Support for Microsoft Windows 7
Cisco is pushing their ASR 9000 at very competitive prices
Cisco is warning Unified Communications customers about NOT successfully offering support for Microsoft Windows 7
Cisco technical star Jonathan Rosenberg
Cisco will have no liability for any delay in delivery
Data Center
Douglas Smith - Cofounder and President of Network Instruments
Expand visibility of NetFlow-dependent NBAD and compliance applications
GigaStor captures and converts packets in NetFlow data flows
Index Venture partner Danny Rimer
Jonathan Rosenberg - a Cisco Fellow in Cisco's Voice Technology Group
Juniper MX960 lab test results
LANs / WANs
Mark Roberts - Polycom vice president of partner marketing
Michael Useem - Professor of Management
Microsoft
NetFlow
NetFlow add-ons
NetFlow overhead can overtax infrastructure
Network Behavior Anomaly Detection (NBAD)
Network Management
Non-NetFlow capable devices are blind to local traffic
Produce NetFlow about any device
SMB
Security
Selection committee member for America's Best Leaders
September 2009 vs. October 2009 Worldwide CCIE Count Comparison
Silver Lake Managing Director - Egon Durban
Skype's cofounders Niklas Zennstrom and Janus Friis
Software
The Charlie angle is to keep Dave Roux on track
The new Cisco ISR G2 portfolio is priced as follows
VoIP / Convergence
What are the benefits of GigaStor NetFlow Agent?
What’s new on the Cisco ISR G2 models vs. the old ISR models?
Windows 7
Windows 7 just not worth an all-out urgent effort by Cisco to support
Wireless / Mobile
eBay CEO - John Donahoe
sFlow
sFlow and NetFlow provides extended visibility
On The Web
Twitter