Without going into details as to why. I need to get two firewalls working on my network. One is in place and the other is new. We will call them Pix1 and ASA1, they are separate pieces of hardware. In order to route traffic properly I will be injecting a router as the DG.
Ok the setup will be as follows:
Inside int of both FW will be connected to the LAN
the LAN router's inside int will be attached to the LAN
Outside int of both FW will be connected to a switch separated from the LAN
The Edge Router(Internet) will be placed on the switch
The LAN router's outside int will be attached to the switch
I need to be able to route to either FW for the time being. In order to get traffic to route through the FW's will this work, and do I need the LAN's outside int attached to the switch?
ip route 0.0.0.0 0.0.0.0 (IP on PIX inside int)
ip route 0.0.0.0 0.0.0.0 (IP of ASA1 inside int)