2 ISP on 1 PIX with different computers on the same subnet using different ISPs

My office has been running off of a single T-1 line up to this point.  Myself and another tech do a lot of downloading for various pieces of software and a T-1 just isn't enough.  We had a cable line put in so that we can use the cable and everyone else can stick on the T-1.  

Here is the goal.  Have two computers on the 10.1.1.0 subnet (mine and the other tech's) go out through the cable while everything else goes out the T-1.  Failover would also be desired both ways.  I am not sure that both of these are possible at the same time, but I would settle for at least getting myself and the other tech onto the cable for now.

Please see the attached jpg for a topology diagram to help explain the setup.

nettop.jpg
LVL 1
Telstar-NetworksAsked:
Who is Participating?
 
Telstar-NetworksConnect With a Mentor Author Commented:
Yea, just put in a whole other PIX and router.  Thanks for the advice.
0
 
JimmyLarssonCommented:
Hello

This is not possible because the fact that the Pix doesn support multiple default routes.

However, there is a "Dual ISP" functionality in newer versions of pix-software. With this function You can have a spare ISP connected. With a tracking-option the Pix can then sense if the primary ISP connection goes down and then route all traffic to the second ISP instead. But as I sait this is a pure failover-function and also only handles outbound traffic.

More info about the dual-ISP function:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806e880b.shtml
0
 
Telstar-NetworksAuthor Commented:
What would be the minimum I could do in order to accomplish my goal by going outside of the PIX?
0
 
yuriskCommented:
PIX/ASA do not provide such service, no matter what firmware version. NEwer ASA indeed provide
Dual-ISP functionality but only for complete failover , i.e. when main link goes down back up one kicks in.
Load balancing you want to do is not possible with PIX/ASA , you need  policy routing which  they dont have.
Whatever solution is possible it would be w/o PIX involved. From current diagram I can only suggest
setting up direct connection between your Core router and cable modem then doing policy
routing (if supported) on this COre router.
0
All Courses

From novice to tech pro — start learning today.