Marc
On firewall just configure some tracking of routes ..
I mean that u have a tracking system on ur Firewall. configure a Track on
ur Firewall pointing ur ISP and see that it should work
Or else configure a Failover on ur FIrewall for both of ur ISPs
On Mon, Feb 6, 2012 at 5:56 PM, Marc La Porte <marc.a.laporte_at_gmail.com>wrote:
> Wael,
>
> 1 - No.
> 2 - Yes
> 3 - They are not a Faoliver pair (if that's way you mean), but they are on
> the inside connected on the same VLAN.
>
> Marc
>
> On Mon, Feb 6, 2012 at 13:10, Wael Ahmed <wsadani_at_gmail.com> wrote:
>
> > we need more details
> > 1- The Two ISP routers You can access it or not
> > 2- The two ISP Routers Running HSRP and have Virtual IP Then The
> > firewalls Have statice route to this IP is it right
> > 3- are there any connection links between The two Firewalls
> >
> > Thanks
> >
> > On Mon, Feb 6, 2012 at 1:55 PM, Marc La Porte <marc.a.laporte_at_gmail.com
> >wrote:
> >
> >> Hey guys,
> >>
> >> I have the following situation
> >> - 2 locations
> >> - one ISP
> >> - each location has a firewall as exit point, with on the inside on
> layer
> >> 2
> >> connectivity between the two locations, and on the outside each firewall
> >> has a directly connected link to an ISP router
> >> - each location has its own IP subnet on the directly connected link to
> >> the
> >> ISP router
> >> - as each firewall is directly connected to its ISP router, there is no
> >> routing; just a default route from the firewall
> >> - on the inside there is EIGRP
> >>
> >> Currently there is no redundancy set between the two locations.
> >>
> >> Since there is no routing toward the ISP, how do I setup redundancy,
> >> considering that from the inside there is a requirement to have a single
> >> IP
> >> address to point to regardless of the exit location?
> >>
> >> The ISP has setup an IP SLA / ICMP linked to HSRP to track if they can
> >> ping
> >> our side.
> >>
> >> Thanks for any input.
> >>
> >> Marc
> >>
> >>
> >> Blogs and organic groups at http://www.ccie.net
> >>
> >> _______________________________________________________________________
> >> Subscription information may be found at:
> >> http://www.groupstudy.com/list/CCIELab.html
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>
>
>
>
-- With Warmest Regards, CCIE KID CCIE#29992 (Security) Blogs and organic groups at http://www.ccie.netReceived on Mon Feb 06 2012 - 20:13:01 ART
This archive was generated by hypermail 2.2.0 : Thu Mar 01 2012 - 11:46:56 ART