I'm currently in a process of NATed and mainly L2 based network migration to a proper routed design and got a little confused reading lots of documentation on the net for what I really need. Bellow I attached a figure to better understand what I seek - basically to know what to do in the cloud with question mark.
What I have is:
- A working BGP provider edge with failover;
- An aggregation switch that has a couple dozen remote switches connected to it;
- ~900 clients that are ordinary people with SOHO routers.
I know that I want to:
- Assign public IPs to end clients from 22.214.171.124/21 via DHCP;
- Rationally use my public IP subnet (126.96.36.199/21);
- Probably have every remote switch in a separate vlan;
- Do rate limiting and firewalling for clients;
- Have some sort of redundancy only for failed hardware (dual links to remote switches are not possible).
I do not want to:
- Use PPPoE for authentication.
I'm aware that there's an easy way: to put a firewalled bridge between aggregation switch and a BGP router, assign few IP addresses and use it as a gateway for clients, but I think that would be stupid.
I only need a design advice and/or some insights.
Many thanks in advance!