Solved

Network Design Question

Posted on 2007-11-16
2
232 Views
Last Modified: 2010-04-17
Right now a pix firewall is the edge device. It connects directly to the ISP's router. I am going to use BGP with an additional edge router to multihome 2 isp's. What is the best configuration as far as routing protocols?

The Pix can use Rip or OSPF. Should I use a protocol or just static routes on the pix? Is it possible to run BGP on the edge router and have the Pix outside int connected to a switch with the router on the switch too? This is because there is another failover pix, so i assume there needs to be a switch in between the router and the pix.

On the inside of the pix there is a L3 switch doing internal routing. It is using EIGRP.

What is the best way to design this?
0
Comment
Question by:jaysonfranklin
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 29

Accepted Solution

by:
Jan Springer earned 500 total points
ID: 20301472
ISP A/ISP B (BGP) -> your router (BGP)
your router (static routes) -> pix

Make sure that you have a static route to null0 with a weight of 250 for the networks that you will be advertising via BGP.  That way if the ethernet or switch goes down or the pix does not failover, your routes will not be withdrawn.

you are correct that you need a switch to connect the two firewalls and a router for failover to the inside network.
0
 
LVL 1

Author Comment

by:jaysonfranklin
ID: 20314091
Ok, thanks...
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This program is used to assist in finding and resolving common problems with wireless connections.
This article explains the fundamentals of industrial networking which ultimately is the backbone network which is providing communications for process devices like robots and other not so interesting stuff.
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…
Monitoring a network: how to monitor network services and why? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the philosophy behind service monitoring and why a handshake validation is critical in network monitoring. Software utilized …
Suggested Courses
Course of the Month10 days, 20 hours left to enroll

628 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question