Solved

PIX 515E - Two ISP's - Trying to create static routes for individual hosts

Posted on 2008-06-19
2
386 Views
Last Modified: 2008-06-20
I just got a second ISP in today which I planned on using to have a couple web servers use, while leaving the rest of my users/servers using my primary ISP as they have been.  

What I was trying to do was create a static route for individual inside hosts... ie -  
192.168.1.10 255.255.255.255  -->  external_gatewayIP_of_2nd_ISP

When i do this, it tries, but renders that host unable to get anywhere on the internet.  I couldn't even access the inside interface (192.168.1.1) from that host (via telnet) after I added that route.  

How can I configure the pix so that I can have 1 or 2 servers nat out through to the 2nd ISP interface?

0
Comment
Question by:xenetar
2 Comments
 
LVL 19

Accepted Solution

by:
nodisco earned 500 total points
ID: 21827182
No can do I'm afraid.  A PIX cannot have 2 gateways out for the simple reason that regardless of which network you are coming from, you still to route a default gateway network of 0.0.0.0 to a destination, and you can only have one default gateway.

If you have 2 ISPs, you *can* use BGP between 2 border routers to load-balance and/or provide redundancy.  A pix though, cannot route default 0.0.0.0 out to any more than 1 destination.

hth
0
 
LVL 1

Author Comment

by:xenetar
ID: 21829675
So I need a second Pix to do the job and change the gateway on those few internal hosts to point to the second pix to make this work?
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

How to configure Site to Site VPN on a Cisco ASA.     (version: 1.1 - updated August 6, 2009) Index          [Preface]   1.    [Introduction]   2.    [The situation]   3.    [Getting started]   4.    [Interesting traffic]   5.    [NAT0]   6.…
Overview The Cisco PIX 501, PIX 506e, ASA 5505 and ASA 5510 (most if not all of this information will be relevant to the PIX 515e but I do not have a working configuration handy to verify the validity) are primarily used within small to medium busi…
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …
As a trusted technology advisor to your customers you are likely getting the daily question of, ‘should I put this in the cloud?’ As customer demands for cloud services increases, companies will see a shift from traditional buying patterns to new…

821 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question