cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
576
Views
0
Helpful
5
Replies

configuring Multiple Internet Gateways using PIX Firewall

meensun
Level 1
Level 1

I have a requirement of providing Internet access to INSIDE users based on groups using a PIX firewall with multiple Zones connecting to 3 Internet uplinks ( different modes like 1 Leased Line, 1 ADSL & 1 ISDN ) as shown in the enclosed slide.

Can somebody suggest me the configuration to be done in PIX firewall for accomodating this multiple Internet gateways or any workaround solution to suit my requirement.

Thnking you in advance

Sundar

5 Replies 5

erickflamenco
Level 1
Level 1

group1 let's say 172.16.10.0 can leave interface 0

nat (inside) 1 172.16.10.0 255.255.255.0

global (outside) 1 interface

group2 172.16.20.0 can leave interface 2

nat (inside) 2 172.16.20.0 255.255.255.0

global (dmz1) 2 interface

group3 172.16.30.0 can leave interface 3

nat (inside) 3 172.16.30.0 255.255.255.0

global (dmz2) 3 interface

Erick

sachin
Level 1
Level 1

It is not possible to do on PIX. As you can have single default gateway on PIX so your entire internet traffic will always go with single link only.

You need to have Router for this.

HTH ,

Sachin Jain

Please refer the below link

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_qanda_item09186a0080094874.shtml

and go to the question---

Can I connect two different ISPs to my Cisco Secure PIX Firewall (for load-balancing)?

HTH,

Sachin Jain

As you could see in the diagram, the guy is using three diferent interfaces, one for each ISP.

If he has problem with not so independent network segments to route the source traffic, he can use access-lists instead well defined networks on nat command.

Erick

jason.aarons
Level 1
Level 1

Focus on delivering it to your outside interface, then have a router select circuit based upon policy based routing.

Review Cisco Networking for a $25 gift card