VoIP + PIX = dual WAN connect

an Internet connection via AT&T IP

Using an Internet based VPN as backup is done all the time.

The 2800 is capable of running the IOS firewall feature so you probably do not need a PIX firewall.

Setup a dynamic routing so that loss of connectivity over the MPLS network is detected and routed around over the VPN backup.

Watch out for the GRE + IPSEC MTU hit on the GRE tunell over Internet T1 access.

Hi,

Several thoughts about your design,

- I personally would never combine an internet feed with a corporate WAN on a single device. Especially not with VoIP running over the same box. Any internet traffic could disrupt services for both the internet and corporate wan traffic (DoS, IOS bug, ...).

- Although it can be done, I wouldn't run VoIP traffic over the PIX. I've seen several issues with PIX (6.3) and VoIP, the most anoying being call-setup latancy (no audio for the first second of the conversation))

- I would add a small router that can service the internet connection and wire things like this: (PIX and 2800 connected to local network and add a serial/ethernet router for the internet connection behind the pix.)