topic Re: does pix support policy based routing. in Network Security

does pix support policy based routing.

fly — Fri, 21 Feb 2020 08:53:49 GMT

i have a scene, pix outside conntect to a layer2 switch, layer 2 switch conntect to two gsr router a and b, cutomer want traffic go through gsr a, and backup to gsr b when gsr a down.

is there any idea?

thank you!

Re: does pix support policy based routing.

Fernando_Meza — Fri, 12 May 2006 02:59:50 GMT

Hi the PIX does support route-map but it is only for redistribution of routes between RIP and OSPF. If you have 2 routers .. Why don't you configure them using HSRP ( if they are cisco ) or VVRP which ius standard to provide redundancy between the two ..

I hope it helps ... please rate it if it does !!

Re: does pix support policy based routing.

haithamnofal — Sun, 14 May 2006 20:39:33 GMT

Hi,

A good way to achieve this if you don't want to configure your routers in HSRP mode, is to configure 2 static routes on your PIX FW with 2 different administrative distances; where the lower distance is for router a (i.e. the primary) and the other static route is for router b. When router a fails, the PIX will route the traffic through router b. Example:

route outside 0 0 1

route outside 0 0 5

Hope this helps.

Regards,

Haitham

Re: does pix support policy based routing.

fly — Tue, 16 May 2006 01:15:01 GMT

Hi Haitham,

Due to PIX outside interface conntected to a 6509,and 6509 connected two GSR.

If i configured two default route,if one gsr is down, PIX doesn't know one gsr is down, How can pix switchover to another default route!

thank you!

Tom

Re: does pix support policy based routing.

haithamnofal — Tue, 16 May 2006 07:07:02 GMT

Hi Tom,

If I'm understanding you correctly, you have your PIX connected to 6509 and the 6509 is connected to two GSR. If so, then the default route on your PIX should be only to the 6509 and on your 6509 you can do policy-based routing if required.

If this is not the case please clarify your setup more so we can help you.

Regards,

Haitham

Re: does pix support policy based routing.

fly — Wed, 17 May 2006 06:49:49 GMT

Hi Haitham,

You understand correctly,But customer want to implement plicy routing on PIX router.

i will tell customer apply policy routing on 6509 switch.

It seems there is no other solution.

Thank you!

Jun Li