One PIX 2 external connections using HSRP on same subnet

[ddisalvo]

I have one ISP with 2 connections on the same subnet using HSRP. I want to route specific traffic over one of the 2 using one PIX can this be done? right now the PIX is routing outside traffic to the virtual IP.

Objective:

1.Route all DMZ traffic outbound on the virtual NIC

2.Route inside traffic going to the internet out the 2nd connections pointing to the physical IP bypassing HSRP.

What would be best another PIX or adding a router on the outside and do some policy routing? Is there any good documentation?

[dbellaze]

You can't do PBR on PIX's. You can use route-map's but they are not used the same way like in PBR. You will probably need a router some where in there to do the work for you.

Daniel

[rais]

If you want to load-balance. Here is another option:

You can define an additional HSRP group on the two routers. This new group should prioritize the other (currently unused) router. You can divide you default route into two default routes 1/1 and 0/1, each pointing to two different next-hops (VIP).

HTH.