Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Security-Basics
[Top] [All Lists]

Re: Failover internet connections, and implementation...

Subject: Re: Failover internet connections, and implementation...
Date: Tue, 23 Oct 2007 16:57:52 -0500
I have yet to see a SMB use redundant ISP links.  However...

With a Cisco ASA 5505 you could have redundant ISP links for not that much money.

An SLA will monitor the health of the primary link, and in case it goes down, will automatically switch to the other link. It can even be a different interface with a different public IP address. The default gateway to the internet will be automatically populated in the routing table.

Anthony



Dan Denton wrote:
I've a question about failover internet connections. I'm interesting in
knowing what kind of implementations that other SMB's use for redundancy,
and to switch to in the case of a DOS attack.


Do any of you have redundant highspeed internet connections for your offices
(versus those for datacenters)? If so, what kind of setup do you have?

Here's the setups I'm considering...

1. Have a second cable modem/dsl modem active, but not hooked into the
network. In the event of a failure, move the connection for perimeter
devices over to the standby connection and reconfigure the perimeter device
to use a different IP.

2. Have a second set of perimeter devices (firewalls) programmed to use the
IP's on the second connection, as a hot standby.

My problem with the first option is the time it would take to reconfigure
firewalls and IDS' to use the other ISP's connection. The problem I have
with the second is the expense of firewalls and IDS' just sitting there
idle.


Any input is greatly appreciated!


Dan






<Prev in Thread] Current Thread [Next in Thread>