• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2717
  • Last Modified:

Multiple Gateways on same network

We currently have two internet connections to our site.  One DSL and one T1.  The DSL line is used for all web and ftp traffic.  The T1 line is used for e-mail only traffic.

We currently have a netgear dual WAN router that acts as the firewall for both the T1 and DSL line.  On the LAN side, this router has only one IP address.  We use protocol binding so that all SMTP traffic is routed out through the T1 line from our e-mail server.  All other traffic is on the DSL line.  

We wish to upgrade this netgear router with a Cisco ASA5505 to handle the DSL line and a PIX 501 on the T1 line.  When we do this, we are going to have multiple gateways.  The e-mail server is the only server that is going to need access to the T1 line.  The problem is I would like webmail to go through DSL.

Is it possible to have e-mail traffic go through the T1 and have incoming webmail traffic come in through the DSL?  Additionally, I would like outgoing web traffic from this server (Windows updates, web browser, etc.) go through the DSL line.
0
OAC Technology
Asked:
OAC Technology
  • 4
  • 3
  • 2
  • +1
1 Solution
 
poweruser32Commented:
have you not considered one of the cisco dual wan routers which im sure they have out or is there a reason to go for 2 different devices?im not certain about incoming web traffic as you would probably need something configured at the isp router end so this would work
0
 
OAC TechnologyProfessional NerdsAuthor Commented:
any idea on the cost to upgrade an ASA 5505 to dual wan?
0
 
OAC TechnologyProfessional NerdsAuthor Commented:
or how i would go about it?
0
Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

 
poweruser32Commented:
im not sure on prices but all i know is that the cisco are pricey enough-is it small or a large company
im not ceratin anyway will this solve your problem-is webmail going thru the T1 or what?
0
 
OAC TechnologyProfessional NerdsAuthor Commented:
we looked at several dual wan products, but they looked like they were intended for fault tolerance.

webmail would go through the DSL line.
0
 
poweruser32Commented:
have a read of this it looks like what you are looking for http://www.experts-exchange.com/Networking/Misc/Q_21842809.html
0
 
lrmooreCommented:
What you are looking for is Policy Based Routing which is pretty standard on most Cisco IOS routers, but not available on either the PIX or the ASA.
You could use a "router on a stick", most any old Cicso router - 1700, 2600, etc - and setup a routing policy that basically says any traffic with source or desination of port 25, source or destination IP of the mail server, next hop is PIX/T1 else all other traffic next hop is ASA/DSL.

Here's a simple config of what it might look like:

interface Fast 0/0
 ip address 192.168.100.100 255.255.255.0
 ip policy route-map EMAIL
ip route 0.0.0.0 0.0.0.0 192.168.100.1  <== default to ASA
access-list 101 permit tcp host 192.168.100.88 any eq 25
access-list 101 permit tcp host 192.168.100.88 eq 25 any
route-map EMAIL permit 10
 match ip address 101
 set ip next-hop 192.168.100.2  <== send to PIX

In this scenario, this router 192.168.100.100 must be the default gateway for all LAN devices.
That's all there is to it.
0
 
OAC TechnologyProfessional NerdsAuthor Commented:
May I throw out one other idea?

I have two network cards in the email server.

Can i plug one network card of the email server into the PIX 501 and set the SMTP server to use that interface?

Could everything else go through the other interface?
0
 
lrmooreCommented:
No. Reason being is that Windows can only support one default gateway and cannot distinguish between applications to do conditional routing.
0
 
static-voidCommented:
if your forwarding smtp queries to a 3rd party smtp server (ie ur isp) you could add a seperate route for traffic to that smtp server to go through a seperate interface, but your probably not doing this.
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

  • 4
  • 3
  • 2
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now