PIX routing

[gsebok]

Hi all!

I have configured a PIX with two outside interfaces

nameif ethernet0 outside security0

nameif ethernet2 outside2 security0

On one interface the network 172.16.1.0/24, on the other the network 172.16.2.0/24 can be reached. The PIX can communicate with the destination through both network (gateway redundancy). If I configure two default routes with different metric

route outside 0 0 172.16.1.1 1

route outside2 0 0 172.16.2.1 2

and I pull out the ethernet cable from the outside interface, the PIX keeps trying to send packet through this interface and doesn't switch to the other.

How can I force the PIX to do this?

Anyway is there any other solution to handle the redundant gateways?

I have tried the RIP2 but the timeout of a RIP entry is too long, I need FASTER switching over.

Gabor

[tvanginneken]

Hi,

the two gateways, are they cisco routers? If they are, I should choose to implement HSRP (hot standby routing protocol) on the two gateways.

Kind Regards,

Tom

[gsebok]

Yes, the two gateways are CISCO routers and we have already used HSRP, but anyway I would like to find out why the PIX behaves itselves such 'abnormal' way. The PIX is a 506, the sw is 6.2.

cheers

Gabor

[rais]

Can you adjust RIP timers for faster switching.

Thanks.