Posted on 2006-05-25
Last Modified: 2010-04-18
I have a watchguard firebox that is my gatway x.x.x.254
I will be adding another device that goes to another internet isp x.x.x.253  (this will be a vpn router connecting to an ASP.)

The plan was to put  a routing statement on the watchguard to send desired traffic requests to the ASP VPN router which we'll call
Here would be my statement ip route x.x.x.253.

The problem is, if my watchguard goes down for any reason, then I lose the routing statement to the ASP.

Anyone got a good workaround that would keep my ASP connectivity working even if the firebox was down?

I'm posting this to win2003 cause that is what my network back end is.

Question by:mcrossland
    LVL 26

    Expert Comment

    put a router between your network and two devices(watchguard and VPN router)
    LVL 15

    Expert Comment

    Either add a router as Vahik has said (although this adds another single point of failure), or add static routes to the devices  (Servers, PC's etc) that need to send data via the VPN router.

    To add a persistent static route to a windows box, the command is:

    ROUTE  -p  ADD  MASK  x.x.x.253
    LVL 10

    Author Comment

    I really don't want to add another point of failure and I was aware of the Route command for workstations. I just didn't know if I could have a backup gatway for workstations and accomplish that without having to run a route command in a login script or having to touch every pc on the network.
    LVL 15

    Expert Comment

    For anything that has its IP address assigned by DHCP, you can assign the route using DHCP Option 249 - Classless Static Routes.
    LVL 10

    Author Comment

    got an article?
    LVL 15

    Accepted Solution

    No, just experience. :)

    Open up DHCP Admin and have a look at the options available in Scope Options. Classless Static Routes is the last option, and gives you an intuitive interface for assigning additional routes.

    The ROUTE PRINT command will show you your current routes. IPCONFIG /REFRESH will pick up any changes to DHCP Options, including Classless Static Routes.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Preface Having the need * to contact many different companies with different infrastructures * do remote maintenance in their network required us to implement a more flexible routing solution. As RAS, PPTP, L2TP and VPN Client connections are no…
    Numerous times I have been asked this questions that what is it that makes my machine log on so slow, there have been cases where computers took 23 minute exactly after taking password and getting to the desktop. Interesting thing was the fact th…
    Migrating to Microsoft Office 365 is becoming increasingly popular for organizations both large and small. If you have made the leap to Microsoft’s cloud platform, you know that you will need to create a corporate email signature for your Office 365…
    how to add IIS SMTP to handle application/Scanner relays into office 365.

    761 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    13 Experts available now in Live!

    Get 1:1 Help Now