topic Firewall interfaces in Network Security https://community.cisco.com/t5/network-security/firewall-interfaces/m-p/1002522#M940552 <P>Say you have three interfaces on a firewall such as a PIX. Two of the interfaces are WAN links, (broadband internet access, different ISP's) and one is your LAN. The LAN interface address is what your LAN uses as its gateway. What determines which WAN interface internet traffic initiated form the inside goes to, assuming you permit the web traffic for both?</P><P>Would you have to choose which one by setting up NAT, Routes, etc, or could you enable LAN users to access both, thereby having a failover option in case one WAN link goes down?</P> Mon, 11 Mar 2019 12:20:53 GMT attrib7575 2019-03-11T12:20:53Z Firewall interfaces https://community.cisco.com/t5/network-security/firewall-interfaces/m-p/1002522#M940552 <P>Say you have three interfaces on a firewall such as a PIX. Two of the interfaces are WAN links, (broadband internet access, different ISP's) and one is your LAN. The LAN interface address is what your LAN uses as its gateway. What determines which WAN interface internet traffic initiated form the inside goes to, assuming you permit the web traffic for both?</P><P>Would you have to choose which one by setting up NAT, Routes, etc, or could you enable LAN users to access both, thereby having a failover option in case one WAN link goes down?</P> Mon, 11 Mar 2019 12:20:53 GMT https://community.cisco.com/t5/network-security/firewall-interfaces/m-p/1002522#M940552 attrib7575 2019-03-11T12:20:53Z Re: Firewall interfaces https://community.cisco.com/t5/network-security/firewall-interfaces/m-p/1002523#M940553 <HTML><HEAD></HEAD><BODY><P>You would setup one as primary ISP link and the second one as a backup. You cannot load balance traffic out both interfaces. Point the default route out via the primary link and another default route with a higher admin distance via the second link. Set NAT rules and may want to configure IP SLA to track the availability of the next hop via the primary link.</P><P></P><P>HTH</P><P></P><P>Sundar</P></BODY></HTML> Fri, 21 Mar 2008 19:40:00 GMT https://community.cisco.com/t5/network-security/firewall-interfaces/m-p/1002523#M940553 sundar.palaniappan 2008-03-21T19:40:00Z Re: Firewall interfaces https://community.cisco.com/t5/network-security/firewall-interfaces/m-p/1002524#M940554 <HTML><HEAD></HEAD><BODY><P>Very good thanks!! I'll start figuring that out.</P></BODY></HTML> Mon, 24 Mar 2008 14:01:38 GMT https://community.cisco.com/t5/network-security/firewall-interfaces/m-p/1002524#M940554 attrib7575 2008-03-24T14:01:38Z Re: Firewall interfaces https://community.cisco.com/t5/network-security/firewall-interfaces/m-p/1002525#M940555 <HTML><HEAD></HEAD><BODY><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806e880b.shtml" target="_blank">http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806e880b.shtml</A></P><P></P><P>This is it here. Unfortunately I dont think think my 6.2 ver PIX supports it. UGH. </P></BODY></HTML> Mon, 24 Mar 2008 15:26:40 GMT https://community.cisco.com/t5/network-security/firewall-interfaces/m-p/1002525#M940555 attrib7575 2008-03-24T15:26:40Z