How to configure two routers with two ISPs and PIX 515 with failover with BGP?

How to configure two routers with two ISPs and PIX 515 with failover with BGP?

This is what we have

2 Cisco 2801 1 PIX 515e 1 PIX 515e FO

ISPs Megapath Qwest

There is public addresses between the 2801s and pixes.

Any help on this would greatly be appreciated.


Reply to
Loading thread data ...

Hope this helps

Qwest ---------- Router 2 ------- PIX FO ------- |

| failover | Megapath----- Router 1 -------- PIX ----------

Reply to
ashaffer schrieb:

No, it does not. What kind is your IP space. PI or PA?


Reply to
Christian Lox

this really doesnt do you any good. If Megapath breaks on the WAN side of the router, your PIX will not failover.

you need a segment inbetween, a switch, that holds both routers and both PIX's and then OSPF and HSRP between the two routers.

then you need to address the public IP range side of this. you need a Provider Indepeendant Range - a PI range aasigned to you. next you need to arrange the BGP with the two providers. and keep in mind the slow convergence times of BGP.

HTH Martin Bilgrav

Reply to
Martin Bilgrav

IP space is almost immaterial, as long as both ISPs agree to advertise it and you have an ASN. Basic design is to have one router peer (EBGP) with Qwest, the other peer (EBGP) with Megapath, run IBGP between them, run HSRP between them for the PIX to use for default GW, configure PIX to be default GW for interior users. That eliminates PIX, routers, lines, and ISPs as single points of failures. Does not eliminate switches or configuration errors as a single point of failure. From the viewpoint of the design, the PIX and the failover PIX are a single box with a higher availability (and some weird failure modes, but that is a different can of worms).

Set up details for BGP will depend upon relative importance of fail over versus load balancing versus budget. Other approaches are possible, depending upon your specific requirements.

Good luck and have fun!

Reply to
Vincent C Jones Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.