Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 272
  • Last Modified:

Routing

I have a watchguard firebox that is my gatway x.x.x.254
I will be adding another device that goes to another internet isp x.x.x.253  (this will be a vpn router connecting to an ASP.)

The plan was to put  a routing statement on the watchguard to send desired traffic requests to the ASP VPN router which we'll call 10.10.10.0
Here would be my statement ip route 10.10.10.0 255.255.255.0 x.x.x.253.

The problem is, if my watchguard goes down for any reason, then I lose the routing statement to the ASP.

Anyone got a good workaround that would keep my ASP connectivity working even if the firebox was down?

I'm posting this to win2003 cause that is what my network back end is.

Thanks,
Mike
0
mcrossland
Asked:
mcrossland
  • 3
  • 2
1 Solution
 
VahikCommented:
put a router between your network and two devices(watchguard and VPN router)
0
 
Darwinian999Commented:
Either add a router as Vahik has said (although this adds another single point of failure), or add static routes to the devices  (Servers, PC's etc) that need to send data via the VPN router.

To add a persistent static route to a windows box, the command is:

ROUTE  -p  ADD  10.10.10.0  MASK  255.255.255.0  x.x.x.253
0
 
mcrosslandAuthor Commented:
I really don't want to add another point of failure and I was aware of the Route command for workstations. I just didn't know if I could have a backup gatway for workstations and accomplish that without having to run a route command in a login script or having to touch every pc on the network.
0
NEW Veeam Agent for Microsoft Windows

Backup and recover physical and cloud-based servers and workstations, as well as endpoint devices that belong to remote users. Avoid downtime and data loss quickly and easily for Windows-based physical or public cloud-based workloads!

 
Darwinian999Commented:
For anything that has its IP address assigned by DHCP, you can assign the route using DHCP Option 249 - Classless Static Routes.
0
 
mcrosslandAuthor Commented:
got an article?
0
 
Darwinian999Commented:
No, just experience. :)

Open up DHCP Admin and have a look at the options available in Scope Options. Classless Static Routes is the last option, and gives you an intuitive interface for assigning additional routes.

The ROUTE PRINT command will show you your current routes. IPCONFIG /REFRESH will pick up any changes to DHCP Options, including Classless Static Routes.
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now