Solved

Add Ethernet adapter to Cisco PIX 515E

Posted on 2011-03-07
9
738 Views
Last Modified: 2012-06-27
Hi All,

My company's network is behind a PIX 515E.  We are going to be adding an additional ISP for redundancy since we have mission critical app's running on our network.  

We have two subnets.   I would like one subnet to continue using the current ISP, and force the other subnet to use the new ISP.

So, I'm going to purchase an additional NIC for the PIX (Anyone know what make/model I should use?)

And then force the 2nd subnet to use the new interface (which will be the new ISP)

Does this sound reasonable? What make/model NIC should I install? Will it be PnP?
0
Comment
Question by:polaris101
  • 5
  • 4
9 Comments
 
LVL 34

Accepted Solution

by:
Istvan Kalmar earned 500 total points
Comment Utility
Hi,

you need:
PIX-1GE-66= or PIX-4FE-66

http://www.cablesandkits.com/cisco-pix4fe-10100-port-fast-ethernet-card-p-1401.html

Don't forget the static nat statements not working with backup lines!

Best regards,
Istvan
0
 

Author Comment

by:polaris101
Comment Utility
Do you know if the new card will be detected automatically?

What do you mean the static nat statements not working?

Thanks
Scott
0
 
LVL 34

Expert Comment

by:Istvan Kalmar
Comment Utility
yep... it is automatically recognized by the PIX!

Because the primary address configured for PIX!

Best regards,
Istvan
0
 
LVL 34

Expert Comment

by:Istvan Kalmar
Comment Utility
it is PnP, but you need to switch of the device!
0
IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 

Author Comment

by:polaris101
Comment Utility
I was going to do something like this:

interface2 auto
nameif ethernet2 outside2 security0
ip address outside 2 X.X.X.X
alias(inside) 10.242.55.253 X.X.X.X 255.255.255.255

interface2 = new ethernet card
x.x.x.x = IP assigned by new ISP
10.242.55.253 = IP of where 2nd subnet will be coming from that I want to force to the new ISP.

How does that look?
0
 
LVL 34

Expert Comment

by:Istvan Kalmar
Comment Utility
0
 

Author Comment

by:polaris101
Comment Utility
At this time I don't want a failover configuration.  Any advice regarding my previous post?
0
 
LVL 34

Expert Comment

by:Istvan Kalmar
Comment Utility
Policy routing not supported by PIX, so you only able to us failover configuration....
0
 

Author Comment

by:polaris101
Comment Utility
Hmm.. So what I mentioned above is not possible then?  An alias wound't work?
0

Featured Post

6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

Join & Write a Comment

This article is focussed on erradicating the confusion with slash notations. This article will help you identify and understand the purpose and use of slash notations. A deep understanding of this will help you identify networks quicker especially w…
Creating an OSPF network that automatically (dynamically) reroutes network traffic over other connections to prevent network downtime.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

8 Experts available now in Live!

Get 1:1 Help Now