Pix with 2 default routes

[insania2016]

Can you have two default routes with PIX 515? My goal is to be able to hook two interfaces to different routers. Each of the routers will be using BGP and they will serve as a redundant internet connection. This would require two pix interfaces and the ability to route over either line. Is this possible or must I put a switch in between and use one interface?

[ehirsel]

You can have two default routes installed on a pix rotue table, but you cannot use two interfaces. You need to use only one interface, and use dynamic routing between the firewall and the upstream gateways. Only rip and ospf are supported.

Alternatvely, you can use a single static route, if you configure HSRP on the internet routers.

Either way (static or dynamic) you will the switch in between the pix and the routers to have a common lan subnet between them using one pix interface.

[jefferson.macedo]

Do I realy need a common lan subnet? Couldn´t I create a Vlan Interface to acommodate differents lan subnets?