topic Re: PIX with Multiple Internet connection in Network Security https://community.cisco.com/t5/network-security/pix-with-multiple-internet-connection/m-p/900532#M956543 <HTML><HEAD></HEAD><BODY><P>Hi, the second link can be used for Redundant ISP Links as show in the cisco example</P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806e880b.shtml" target="_blank">http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806e880b.shtml</A></P><P></P><P>1. you don't need layer3, layer 2 is fine, PIX 2 outside interface connecting 2 ISP link.</P><P>2. only one default route is active,so if request coming in second link, the return traffic will go to primary link, which cause asymmetric path will fail tcp based application like http.</P><P></P><P> </P></BODY></HTML> Thu, 24 Jan 2008 06:22:03 GMT pengfang 2008-01-24T06:22:03Z PIX with Multiple Internet connection https://community.cisco.com/t5/network-security/pix-with-multiple-internet-connection/m-p/900531#M956542 <P>Hi,</P><P></P><P>I want to configure my PIX firewall for two ISP links. My firewall is connected with Layer 3 switch in which two ISP links are connected and pix outside is connected in this layer 3 switch.</P><P></P><P>Two links are with different Global Internet IPs are connected with layer 3 switch. </P><P></P><P>One link is working. My firewall has default route to this switch. </P><P></P><P>Now second link will also come to this switch with different global IP pool. </P><P></P><P>Please tell me how to configure my firewall so that firewall can route traffic to link A when request comes from subnet A and request goes to Link B when request comes from subnet B.</P><P></P><P>Waiting for reply</P><P></P><P></P> Mon, 11 Mar 2019 11:52:21 GMT https://community.cisco.com/t5/network-security/pix-with-multiple-internet-connection/m-p/900531#M956542 wasiimcisco 2019-03-11T11:52:21Z Re: PIX with Multiple Internet connection https://community.cisco.com/t5/network-security/pix-with-multiple-internet-connection/m-p/900532#M956543 <HTML><HEAD></HEAD><BODY><P>Hi, the second link can be used for Redundant ISP Links as show in the cisco example</P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806e880b.shtml" target="_blank">http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806e880b.shtml</A></P><P></P><P>1. you don't need layer3, layer 2 is fine, PIX 2 outside interface connecting 2 ISP link.</P><P>2. only one default route is active,so if request coming in second link, the return traffic will go to primary link, which cause asymmetric path will fail tcp based application like http.</P><P></P><P> </P></BODY></HTML> Thu, 24 Jan 2008 06:22:03 GMT https://community.cisco.com/t5/network-security/pix-with-multiple-internet-connection/m-p/900532#M956543 pengfang 2008-01-24T06:22:03Z