PIX with Multiple Internet connection

[wasiimcisco]

Hi,

I want to configure my PIX firewall for two ISP links. My firewall is connected with Layer 3 switch in which two ISP links are connected and pix outside is connected in this layer 3 switch.

Two links are with different Global Internet IPs are connected with layer 3 switch.

One link is working. My firewall has default route to this switch.

Now second link will also come to this switch with different global IP pool.

Please tell me how to configure my firewall so that firewall can route traffic to link A when request comes from subnet A and request goes to Link B when request comes from subnet B.

Waiting for reply

[pengfang]

Hi, the second link can be used for Redundant ISP Links as show in the cisco example

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806e880b.shtml

1. you don't need layer3, layer 2 is fine, PIX 2 outside interface connecting 2 ISP link.

2. only one default route is active,so if request coming in second link, the return traffic will go to primary link, which cause asymmetric path will fail tcp based application like http.