We help IT Professionals succeed at work.

PIX and Load Balancing when using PAT instead of NAT

zillah
zillah asked
on
650 Views
Last Modified: 2013-11-16
We have two mail firewalls (Border Ware ) in the DMZ area, their ip addresses are 192.168.101.3/24 and 192.168.101.5/24

 To implement load balancing (mails to be delivered to both of them in equal ) on these mail firewalls, I have been advised to use NAT for these two private ip addresses (192.168.101.3 and 192.168.101.5) to two different (not one) public ip addresses.

Since we have not got two much public ip addresses, my suggestion was to use PAT (not NAT),,,but when I use PAT can a PIX implement load balancing ?
Comment
Watch Question

Commented:
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION
You could do it only if you have 2 public ip addresses. Then again, the pix will just make sure that either one of them or both of them send mails outside/inside. The load balancing theory is based off the whole setup.

Cheers,
Rajesh
Top Expert 2006

Commented:
Assuming you balance mail delivery via equal costs in your MX records to the external public addresses.

There is nothing built into the pix hardware to do actual load balancing as renil said  using ospf or similar would allow for load balancing as would something along the lines of a cisco loaddirector or other load balancing hardware.

Cluster the mail servers together and redirect the inbound to a virtual ip .
\
Unlock the solution to this question.
Join our community and discover your potential

Experts Exchange is the only place where you can interact directly with leading experts in the technology field. Become a member today and access the collective knowledge of thousands of technology experts.

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.