Trying to setup a PIX 515e with 2 external interfaces

[huwyhuwy123]

Hi there,

To give you the background we are looking to migrate from our current internet provider. Because there are a lot of services running through our current connection my idea was to have the old line and the new line running side by side so I migrate the services over 1 by 1. We have a Cisco PIX 515e which had 3 interfaces: outside, inside and DMZ. I'm trying to reconfigure the DMZ interface to be a secondary "outside" or external interface and called it WAN2. Therefore the cisco would have 1 internal interface and 2 external interfaces.

The config is attached with sensitive info removed. I think the problem may lie with the routing as I I'm not sure what to change this command to...

"route WAN2 172.16.101.0 255.255.255.0 Y.Y.Y.Y.190 1"

I've tried

"route WAN2 0.0.0.0 0.0.0.0 Y.Y.Y.Y.190 1"

but the PIX won't take this as there is already a 0.0.0.0 0.0.0.0 route setup.

Can anyone offer any suggestions with this? Is it even possible?

Cheers,

Huw

[mirober2]

Hi Huw,

Unfortunately, the PIX does not support 2 default routes being used simultaneously as you noticed. You would have to use 1 default route pointing to an upstream router that supports policy-based routing, and allow the router to make the decision about which ISP to use.

Hope that helps.

-Mike

[huwyhuwy123]

Thanks Mike. I will look at alternatives.