Cisco 2600 and port 80

[thelke]

Here is my currnt config.

Cisco 2600 w/ a T1 csu/dsu w/ IP
Interface FA0/0 with IP ending in .81
Firewall w/ IP ending in .82
Our web site resoves to the firewall at IP ending in .82

What I want to
Cisco 2600 w/ a T1 csu/dsu
Interface FA0/0 withIP ending in .82
Firewall-1 w/ IP ending in .84
Firewall-2 w/ IP ending in .85
Network
Our web site resoves to the Cisco at IP ending in .82 and routes to Firewall-1 w/ IP ending in .84. I try to add the route, and get an error that it is an incorrect sub-net. I leave it be and external traffic tries to go to a web interface on the 2600. I do a NO IP HTTP SERVER, and external traffic gets a Page Cannot Be Displayed.

How do I tell the 2600 that all traffic on Inteface FA0/0 is to go to the external interface on Firewall-1 ending in IP .84? I tried IP ROUTE x.x.x.82 255.255.255.0 x.x.x.84 but this still did not do it. I figure that somewhere I have to tell it to pass PORT 80 to x.x.x.84.

Also, is there a way to do failover automatically so id Firewall-1 goes down, the internal route changes to the external interface on Firewall-2?

Thanks in advance!

Tad

 

[lgarner]

Have your web server resolve to the firewall's address, not the 2600's. Then it's up to the firewall to provide NAT and routing.

Dynamic routing protocols come to mind for failover, but a much better solution is to use the firewall's high-availability capability. That would depend on the firewall that you're using.

 

[thelke]

Ok. I will bit the bullet and activate high availability within my firewalls. I was hoping to avoid that, but thanks for the quick response.