Multiple ISPs and gateways with a PIX 525?

Chris · 2007-02-20T19:58:58+00:00

Folks,I have a PIX 525 which serves as the main firewall for the company Iwork for. The connection we have to our ISP is currently a T1,provided by a 2821 router. Eth0 on the 2821 goes to a switch, which iswhere we also connect Eth0 of the PIX for internet connectivity.We have had another T1 installed from a different ISP (i.e. we're notbonding them), and I'd like to use this bandwidth provided for somesite-to-site VPNs. That is, I want most of our traffic to go throughthe 1st T1, but some site-to-site VPNs to use the 2nd T1. Trouble is,I'm not sure how to do this. The PIX 525 has Eth0 (outside) and Eth1(inside) interfaces, as well as four additional interfaces (Eth2-Eth5). Eth4 is currently free, and that's the IP I'd like to use forthe site-to-site VPNs.I suppose my question boils down to a question of routing. I want tomaintain the default route (the 1st T1), and use the 2nd T1 *only* forthe site-to-site VPNs. So can I just do this?ip address Eth4 72.45.x.194 255.255.255.248route Eth4 72.45.x.194 255.255.255.248 72.45.165.193Obviously, 72.45.x.194 is my ISP-assigned IP address and 72.45.165.193is my ISP-assigned gateway IP address. Do I need to add this route, ornot? My big concern is that I do NOT want "regular" network traffic togo out of that interface, I only site-to-site VPNs that I provide a"site-vpn set peer" address to use this interface.Does my question make sense? And if so, can it be done? This isrunning PIX OS 6.3(5).Thanks!Chris

Feb 20, 2007 20 Replies

Rate this thread:

Chris 19 years ago

Thanks Brian. What do I need to add to it?

Chris

Vote

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required