Need help setting up redundant internet access

[tinoss]

I have a client who has a primary T1 for internet access and a DSL for backup internet access. Both cicuits have a PIX firewall 515e hooked up to them. Each firwall has a different IP address but same exact configuration. We are trying to set it up so that if the T1 goes down for any reason users can still access the internet though the DSL line and that the Exchange server can send and receive email. We tried adding a second gateway to the Nic cards ont the servers but the connection seems flaky. Does anyone have a better way of doing this? I've seen somewhere where they've stuck a Cisco router in front of the PIX's so that the whole network has 1 gateway to deal with and the Router detets which line is available and routes the info to the connections that is up. Any help would be appreciated.

 

[yizhar]

HI.

For incoming email fault tolerance, I think you need to add a secondary record (with the DSL line ip address) to the MX record so that when you switch to DSL you will continue to get incoming mail.

About the main networking issue, as you mentioned, you need a router to handle such a configuration.
This can be done on the inside (the router will choose which pix to use), or on the outside (you use only one pix and the other as cold standby or failover).

I have no much knowledge or experience with routing so won't give you info on how to do it.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[br0ck]

Check this out
bit Pricy but will do the job with one PIX

http://www.nexland.com/turbo.cfm

Brock D. Mowry,MCP
Hardware Specialist
iNECTA LLC
Miami, Fl