Need 2 PIX internet connections temporarily

[cahelmster]

We are in the process of switching from DSL to a T1 for our Internet connection. I need to setup the PIX to simultaneously allow traffic on both lines (different IP setup for each line) temporarily until we take out the DSL line...any suggestions?



----------------
Thanks!
CH

 

[andf1]

I assume you have a DSL modem/router on a segment with public addresses outside the PIX. Where is the T1 router plugged in? How many interfaces do you have on your PIX?

 

[cahelmster]

Currently, our DSL line plugs into interface 0 on the PIX and there is a connection from interface 1 to a router. Our ISP is bringing in another router with a built-in CSU-DSU. I'm not sure how they will connect it and leave the DSL line in place but they want to know if I can set the PIX to run both connections. I don't think we have any more interfaces on the PIX...



----------------
Thanks!
CH

 

[andf1]

What model of the PIX do you have? It sound like you have low end PIX, that is a PIX 501 or 506. They do not support VLANs. So, you probably cannot both both the T1 and the DSL at the same time.

If you have a high end PIX that supports VLANs, you could probably have two virtual interfaces on the outsite, each with it's own IP address, and achieve your goal. You will also need a switch on the outside that support VLANs. The T1 could be connected to one VLAN and the DSL to another. You will need two NAT statements and two GLOBAL statements each on the PIX. You could then configure some internal addresses to use the first NAT pool and others to use the second NAT pool, thereby utilizing both circuits.

Andy

 

[cahelmster]

It's a PIX 515...we have an unused expansion ethernet card that I would like to use for the second connection... Any ideas?

----------------
Thanks!
CH

 

[baddos]

Is your DSL static IP?

 

[cahelmster]

Yes, we have been assigned two different static IP schemes for each Internet link...

----------------
Thanks!
CH

 

[andf1]

I have not tried the solution proposed above but the PIX documentation on VLANs should be a start.

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/config/bafwcfg.htm#1113411