topic PIX Load Balancing in Network Security

PIX Load Balancing

colbyarnold — Fri, 21 Feb 2020 07:58:01 GMT

I am trying to set up a second internet router to load balance my four circiuts (2 in each router). The problem I am running into is I can not enter a second outside IP route with the same metric in the pix. How can I load balance between the pix and two routers? Thanks

Re: PIX Load Balancing

Patrick Iseli — Wed, 16 Feb 2005 02:35:14 GMT

This is not really possible for the moment. You just can have one default route with the same metric.

A way could be by using BGP but your ISP have to support that. Or another routing protocol.

Or you buy a loadbalancer.

http://www.victrix.ca/elfiq/index.htm

Radware or F5 Linkcontroler

sincerely

Patrick

Re: PIX Load Balancing

vitaliy.pindyura — Thu, 17 Feb 2005 01:37:38 GMT

Are those two routers on the same internal subnet? If so, you can setup HSRP between them and point pix default route to a virtual HSRP address. This way you will have some redundancy (when one router dies, another one become active) and also once you get your traffic to the router you can do a lot of stuff using "policy routing".

Re: PIX Load Balancing

mabadie — Mon, 21 Feb 2005 15:09:45 GMT

hi vitaliy.pindyura

i have the same problem because i want to connect 2 isp with pix fw 515e .one isp backup to the other isp. if i can operate the HSRP between 2 external routers (internet routers). i need to understand how the pix made dynamic nat and static nat.

thanks alot

Re: PIX Load Balancing

colbyarnold — Tue, 22 Feb 2005 13:20:04 GMT

I understand the HSRP between my two internet routers but if one fails I still have to manually change the physical circuits to the failover router. So if there was a way to enter a second outside address it the PIX I could split the load between the two routers. It sounds like the PIX is able to do that yet.