2 internet connections behind 1 PIX - will it work?

Posted on 2003-03-20
Medium Priority
Last Modified: 2010-04-17
Our office currently uses a 768K DSL connection for Internet access.  This connection is behind a PIX506.  We just had a new Point-to-Point T1 installed to a different ISP.  We want to use both connections to the internet (the DSL connection will just be used by our dept. going forward).  Do we need to buy a seperate firewall for each connection, or can we simply put the new T1 into a 1600 on the outside of the PIX, and then run both the DSL and T1 connections into a switch, and then into the PIX?

Many thanks!
Question by:Network_MD
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
LVL 79

Expert Comment

ID: 8175437
The PIX can have only one default route for outbound traffic, so either you do some tricky route-mapping in the 1600 with the T1, and some creative use of NAT on the PIX, or you get another firewall for your department's use.


Accepted Solution

epylko earned 320 total points
ID: 8176562
Perhaps there's a terminolgy issue, but the DSL connection should be outside the PIX.  You should be on the inside of the PIX.

Anyway, you could put something like a 1700 series router with a T1 card and a 2nd Ethernet card (or a 2611XM).  One ethernet on the router would go to the DSL line while the other ethernet connection would go to the PIX.  The T1 still goes into the router.

The router can do per destination load balancing.  If that's not good enough, you could do some sort of policy routing to have some people go across the DSL line and others go across the T1


Author Comment

ID: 8178167
I'll try adding a 2nd ethernet port to the 1721 on my desk (was going to put it in another location next month) and see how that works and then feed that into the PIX... good idea.  I'll keep you posted. Thanks....

Author Comment

ID: 8422064
Thanks Eric.. I've ordered the 1721 with an extra Ethernet card, I drew it out and that makes total sense.  I should have thought of that.. thank goodness for the extra help out there on the internet...  Thanks again!

Expert Comment

ID: 8576041
Will the outbound work using ISP 1 addresses over the ISP 2 network or vice versa? Who's IP add goes on the PIX?

Featured Post

Flexible connectivity for any environment

The KE6900 series can extend and deploy computers with high definition displays across multiple stations in a variety of applications that suit any environment. Expand computer use to stations across multiple rooms with dynamic access.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

New Server  was moved from behind Router R2 f0/1 to behind router R1 int f/01 and has now address But we want users still to be able to connected to it by old IP. How to do it ? We can used destination NAT (DNAT).  In DNAT…
Tired of waiting for your show or movie to load?  Are buffering issues a constant problem with your internet connection?  Check this article out to see if these simple adjustments are the solution for you.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Suggested Courses

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question