Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Firewalls
[Top] [All Lists]

PIX failover without using HSRP

Subject: PIX failover without using HSRP
Date: Wed, 22 Sep 2004 17:52:39 -0700 (PDT)

Hi,

 

I need to know if it is possible to use PIX firewalls with failover capability 
directly connecting to ISP routers. 

 

We do not have our own edge routers  This means there is no HSRP availability 
for PIX to route all outside traffic to one single address.

 

Here are the IP addresses:

 

PIX - Active outside: 192.168.50.1

ISP Edge router 1: 192.168.50.2

PIX  Active inside: 10.10.0.1

 

PIX  Standby outside: 192.168.60.1

ISP Edge router 2: 192.168.60.2

PIX  Standby inside: 10.10.0.2

 

Can I use OSPF routing to make failover work?

 

What will happen when failover occurs? Will the PIX  Standby outside IP 
address (192.168.60.1) gets overwritten as 192.168.50.1?

 

Can I omit the failover IP address outside command to prevent this?

 

Please let me know if anybody has implemented this kind of solution. Any links 
or tips will be very helpful. 

 

Thanks,

Steve

 


                
---------------------------------
Do you Yahoo!?
New and Improved Yahoo! Mail - Send 10MB messages!
<Prev in Thread] Current Thread [Next in Thread>