cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
345
Views
0
Helpful
1
Replies

VPN to PIX with multiple ISP's

techmaster
Level 1
Level 1

I have a PIX with a 2621 between it and three ISP's. I am now terminating a VPN (clients) to the PIX via one of the ISP's. I want to be able to access the same VPN group from any one of the three ISP's, should one or two fail. What is the best way to do this? I'm thinking of static NAT statements on the 2621, but do I have to use three different IP addresses on the PIX, or can all three NAT statements point to the same outside interface address?

1 Reply 1

jay_colby
Level 1
Level 1

I am assuming that all 3 ISP connections terminate on the 2621. If this is the case, all you need to make sure of is that routing is set up properly. Default gateway of the pix is 2621. And the 2621 routes the vpn traffic to the interface on the PIX that has the IPSEC configured.

The pix does not care what ISP a IPSEC tunnel is comeing from.