topic PIX routing in Network Security

PIX routing

gsebok — Fri, 21 Feb 2020 06:25:15 GMT

Hi all!

I have configured a PIX with two outside interfaces

nameif ethernet0 outside security0

nameif ethernet2 outside2 security0

On one interface the network 172.16.1.0/24, on the other the network 172.16.2.0/24 can be reached. The PIX can communicate with the destination through both network (gateway redundancy). If I configure two default routes with different metric

route outside 0 0 172.16.1.1 1

route outside2 0 0 172.16.2.1 2

and I pull out the ethernet cable from the outside interface, the PIX keeps trying to send packet through this interface and doesn't switch to the other.

How can I force the PIX to do this?

Anyway is there any other solution to handle the redundant gateways?

I have tried the RIP2 but the timeout of a RIP entry is too long, I need FASTER switching over.

Gabor

Re: PIX routing

tvanginneken — Mon, 09 Dec 2002 16:08:30 GMT

Hi,

the two gateways, are they cisco routers? If they are, I should choose to implement HSRP (hot standby routing protocol) on the two gateways.

Kind Regards,

Tom

Re: PIX routing

gsebok — Mon, 09 Dec 2002 16:51:50 GMT

Yes, the two gateways are CISCO routers and we have already used HSRP, but anyway I would like to find out why the PIX behaves itselves such 'abnormal' way. The PIX is a 506, the sw is 6.2.

cheers

Gabor

Re: PIX routing

rais — Tue, 10 Dec 2002 01:17:24 GMT

Can you adjust RIP timers for faster switching.

Thanks.