Using switches between ISP and Main Router

Networking & Firewalls
1

Hi All,

Im wondering if there is a special or a better way of doing this, I believe Im correct but I’d like to get some extra input on this before I do it.

I currently have 2 ISP coming in to the building, both have 5 static IPs available. Currently these ISPs are connected to a UDM SE, and this distributes the static IPS out to clients via the GUI but causes Dbl NAT issues for those also running their own UDM SE devices. Current two clients have this.

I believe I can insert a switch between the Providers router, and the UDM SE for the building, Im thinking (or I have on hand and EdgeSwitch 10x).

Is my thought process correct that If I connect the provider to the edgeswitch, and then connect Multiple UDM SE devices to the ports I can then configure them all to use a static IP address in my range? Would it be best to VLAN each port off.

Can someone tell me or guide me if this is a bunk idea on how to achieve this please? In essence the end result would be to have a direct connection with static ip from my range to each client UDM SE

dblNAT
dblNAT702×652 42.1 KB

2

If I am understanding you correctly, what I would do is create a VLAN for you ISP (if your current switches are layer 2) and then connect the WAN ports to the same access port of the ISP VLAN to your client routers.

3

Either putting a dedicated switch in place, or creating VLANs on your LAN switch to isolated the ISP traffic is fine. The former is called a “DMZ switch” and the latter is called a “Core switch” (all connections from the routers connect to the same switch or same switch stack, both LAN and WAN).