Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Network Design Question

Posted on 2007-11-16
2
Medium Priority
?
234 Views
Last Modified: 2010-04-17
Right now a pix firewall is the edge device. It connects directly to the ISP's router. I am going to use BGP with an additional edge router to multihome 2 isp's. What is the best configuration as far as routing protocols?

The Pix can use Rip or OSPF. Should I use a protocol or just static routes on the pix? Is it possible to run BGP on the edge router and have the Pix outside int connected to a switch with the router on the switch too? This is because there is another failover pix, so i assume there needs to be a switch in between the router and the pix.

On the inside of the pix there is a L3 switch doing internal routing. It is using EIGRP.

What is the best way to design this?
0
Comment
Question by:jaysonfranklin
2 Comments
 
LVL 29

Accepted Solution

by:
Jan Springer earned 2000 total points
ID: 20301472
ISP A/ISP B (BGP) -> your router (BGP)
your router (static routes) -> pix

Make sure that you have a static route to null0 with a weight of 250 for the networks that you will be advertising via BGP.  That way if the ethernet or switch goes down or the pix does not failover, your routes will not be withdrawn.

you are correct that you need a switch to connect the two firewalls and a router for failover to the inside network.
0
 
LVL 1

Author Comment

by:jaysonfranklin
ID: 20314091
Ok, thanks...
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you’re involved with your company’s wide area network (WAN), you’ve probably heard about SD-WANs. They’re the “boy wonder” of networking, ostensibly allowing companies to replace expensive MPLS lines with low-cost Internet access. But, are they …
Powerful tools can do wonders, but only in the right hands.  Nowhere is this more obvious than with the cloud.
If you're a developer or IT admin, you’re probably tasked with managing multiple websites, servers, applications, and levels of security on a daily basis. While this can be extremely time consuming, it can also be frustrating when systems aren't wor…
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…

782 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question