PIX connection to 2 ISPs (routerman may have the answer!)

[sunyasee]

Hi

I have a network with two ISP connections. I want to use both links so that effectively I have a default route over both connections, I have an ASA and obviously it is not possible just to add in two default routes. Routerman suggested in an earlier thread that you can do this by setting a default route for one ISP interface and then using a reverse NAT rule for the other line to spoof the source address of incoming hosts on the other ISP link. Routerman wrote in an earlier thread..

'I have set up a similar system, using 2 ISP's. The way I did it was to connect each ISP into a different interface in the PIX, and use inbound NAT to `spoof' the outside source IP addresses. This way I could determine source of the outside IP address ranges, so could write routes in the PIX to control the return traffic.

Reason I did this was to provide Internal users default access to the Internet using a default route via the outside interface security 0, and routes back to VPN via another interface.'

Does anyone have a configuration that shows how this is done?

Thanks



----

Sunyasee

 

[horus42]

see these pages

http://www.cisco.com/en/US/products...s_configuration_example09186a00806e880b.shtml

http://www.tek-tips.com/viewthread.cfm?qid=1315032&page=1