topic Re: Pix 515 2 ISP's Question in Network Security

Pix 515 2 ISP's Question

lreger — Fri, 21 Feb 2020 11:03:29 GMT

I have a customer with a cisco pix 515. Is there a way to have 2 seperate configs on the pix and be able to quickly select which config you want to boot off of? My customer has been having problems lately with his primary ISP which happens to be the faster connection between the 2 and when it goes down he has to manually make the IP changes on the pix to perform the switchover.

Re: Pix 515 2 ISP's Question

abinjola — Mon, 20 Oct 2008 05:31:28 GMT

ok..

I have a customer with a cisco pix 515. Is there a way to have 2 seperate configs on the pix and be able to quickly select which config you want to boot off of?

--YES YOU MAY CONFIGURE YOUR PIX 515E IN MULTIPLE CONTEXT

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00808d2b63.shtml

My customer has been having problems lately with his primary ISP which happens to be the faster connection between the 2 and when it goes down he has to manually make the IP changes on the pix to perform the switchover

--YOU MAY CONFIGURE "DUAL ISP FEATURE".

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806e880b.shtml

Re: Pix 515 2 ISP's Question

lreger — Tue, 21 Oct 2008 02:52:58 GMT

Thanks for the links. I have one more question for you. If my customer has site to site vpn's and remote users connected with the Cisco VPN client and the primary connection goes down and the backup connections comes up with the DUAL ISP Feature will the remote users still be able to VPN in or will they have to have 2 profiles for each external address?

Re: Pix 515 2 ISP's Question

abinjola — Tue, 21 Oct 2008 06:20:01 GMT

--you need two profiles on VPN Client

--You need to enable crypto map one each on ISP1 interface and ISP 2 interface

Re: Pix 515 2 ISP's Question

suschoud — Tue, 21 Oct 2008 23:07:22 GMT

multiple context does not support static route tracking,alternatively isp fallback.

So,you would not be able to run both simultaneously.

http://www.cisco.com/en/US/docs/security/asa/asa72/command/reference/t_72.html#wp1382341

command : track rtr

Regards,

Sushil 😉

Re: Pix 515 2 ISP's Question

okuehn — Sat, 22 Nov 2008 08:34:30 GMT

you can use one profile by setting up the ispbackup interface ip as a backup server in the VPN pcf file.

we have successfully implemented and tested this solution. hope this helps!