Redundant switch second time

add a set of outsider routers and then you could do this

BGP Across a PIX Firewall

Which parts are you concerned with? From your description and diagram, everything looks redundant already.

That should be the goal, but how to achieve it?

Meaning how to configure the setup ?

Yes that's right

1. HSRP facing inside LAN

1. OSPF between routers and PIX inside interface

2. PIX default route pointing to ISP

1. PIX advertise default router to inside routers vis OSPF

This will work until the link to one of your ISPs goes down and the does not take the Ethernet I/F of PIX down with it. Then you have half your packets being shipped out into oblivion.

If you really want to do this with no single point of failure, you also need a mechanism to detect that one of your ISPs is down. You'll also need a total of six switches, four routers and two firewalls, although you may choose to combine some of those functional blocks into multipurpose appliances, as long as your combos are vertical and not horizontal.

good luck and have fun!

see Cisco Doc "Data Center Networking: Internet Edge Design Architectures"

take a look at page 3-41 of that document

Thanks for your reply. I should have been more precise. Actually my job is to duplicate internal equipments including PIX but not part that conects to ISP. Anyway company has one ISP only

| sw1 | Internet ^ | v | fw1 | | fw1a | Firewall Failover ^ ^ | | v v | sw2 | | sw2a | LAN ^ ^ | | v v | RT1 | | RT1a | Router Standby (HSRP)

Thanks