topic Re: adsl as backup for internet connection thru PIX in Network Security

adsl as backup for internet connection thru PIX

rpalacio — Fri, 21 Feb 2020 08:08:41 GMT

my client has mpls connection to the internet connected on the OUTSIDE interface of the firewall. And they decided to have an ADSL to act as a backup for their internet connectivity.

Ive read that we can only have a single default route on the PIX. What could be the best solution to this issue.

Thanks a lot.

Re: adsl as backup for internet connection thru PIX

a.alekseev — Tue, 17 May 2005 07:09:09 GMT

You can ask mpls provider to run OSPF between PIX and PE.

Provider will advertise only defalt route to the PIX.

On the pix you must have got default static route to ADSL with administrative distance greater than 110.

Re: adsl as backup for internet connection thru PIX

rpalacio — Tue, 17 May 2005 10:59:20 GMT

thanks. but how will my firewall know that the link on the mpls is down taking into account that the mpls switch port connected to the outside of the pix is always up?

thanks again.

Re: adsl as backup for internet connection thru PIX

matt-long — Tue, 17 May 2005 11:04:08 GMT

The pix version 7 software supports up to 3 equal cost default routes. However, you best option would be a router that as your current connection and a ADL connection into it and use the "backup interface" command to control the fail over.

Re: adsl as backup for internet connection thru PIX

rpalacio — Wed, 18 May 2005 04:16:17 GMT

My MPLS connection is thru a 3550 switch and not a router.

Is the backup interface command to be executed on the switch or the firewall?

Thanks a lot.

Re: adsl as backup for internet connection thru PIX

tyagivijay — Wed, 18 May 2005 05:09:04 GMT

Hello Matt ,

Just want to know that is it possible to assign Dynamic IP on PIX outside Interface connected to the DSL Router??

Network Setup:--

----Internet----DSL Router----PIX(506E)----LAN

Note: - We don’t have any static IP .

Thanks

vijay

Re: adsl as backup for internet connection thru PIX

tyagivijay — Wed, 18 May 2005 05:09:39 GMT

Hello Matt ,

Just want to know that is it possible to assign Dynamic IP on PIX outside Interface connected to the DSL Router??

Network Setup:--

DSL Router----PIX(506E)----LAN

Note: - We don’t have any static IP .

Thanks

vijay

Re: adsl as backup for internet connection thru PIX

tyagivijay — Wed, 18 May 2005 05:09:39 GMT

Hello Matt ,

Just want to know that is it possible to assign Dynamic IP on PIX outside Interface connected to the DSL Router??

Network Setup:--

DSL Router----PIX(506E)----LAN

Note: - We don’t have any static IP .

Thanks

vijay

Re: adsl as backup for internet connection thru PIX

matt-long — Wed, 18 May 2005 12:30:57 GMT

use:

ip address outside dhcp setroute

This will pick p the ip from DHCP and setroute puts a default route in

Re: adsl as backup for internet connection thru PIX

matt-long — Wed, 18 May 2005 12:34:58 GMT

The backup interface command is used on a router, surely you are installing a router to use with the ADSL line?

Re: adsl as backup for internet connection thru PIX

rpalacio — Thu, 19 May 2005 04:16:37 GMT

but the way i understand backup interface is executed on the main connection. ADSL in our case is a secondary (backup) internet connection.

Re: adsl as backup for internet connection thru PIX

matt-long — Thu, 19 May 2005 07:13:07 GMT

yes, that is correct.

What I was trying get at, was that if you have a router for your ADSL you could speak to your ISP and arrange for the MPLS to be terminated on a router so that you could use adsl as a backup. In fact, you really shold get your ISP involved to ensure that your IP addreses etc are routed correctly when using the backup.

Re: adsl as backup for internet connection thru PIX

rpalacio — Sat, 21 May 2005 04:25:13 GMT

But in my case, the MPLS connectivity is a 3550 and the adsl is a separate router and i dont have access to the MPLS switch. Does this mean am handicuff this time?

thanks.

Re: adsl as backup for internet connection thru PIX

rpalacio — Mon, 23 May 2005 04:38:53 GMT

I couldnt find any mid range router that is supporting MPLS. Could you help me on this?

Thanks.

Re: adsl as backup for internet connection thru PIX

a.alekseev — Mon, 23 May 2005 05:31:01 GMT

2691 and higher

Re: adsl as backup for internet connection thru PIX

matt-long — Mon, 23 May 2005 07:10:17 GMT

If you use a dynamic routing protocol you can setup the network like this:

LAN --- Cisco --- 3550 --- MPLS

2621

\---ADSL

and use the dialer watch command, this allows you to watch routes and use the backup if the routes disappear. Take a look at:

http://www.cisco.com/en/US/partner/products/sw/iosswrel/ps1835/products_configuration_guide_chapter09186a00800dc81c.html#wp1000889

Warning: this is my understanding, I haven't tried it in the real world......

Re: adsl as backup for internet connection thru PIX

rpalacio — Mon, 23 May 2005 19:55:19 GMT

nice suggestion..but is adsl considred as DDR?..this is one of the prerequisite in usng dialer watch that was shown on the above link.