Hi Haitham, thanks for your responce and greatly appretiated. I will definately look into your posting today.

Rgds

Jorge

Hi Haitham, I looked at your implementation somewhat similar to mine with only one difference, you have two ISPs coming into one internet-edge router. In my case I will have two internet edge routers each as different ISP coming into my PIX or better say my external switch then the PIX. What I am mostly looking for is how to go about cutting over a new ISP and the whole implementation process. Could you or anyone comment on this process, if I missed anything or if there is any other way or better ideas on how I should implement this ISP migration it will be greatly appreciated.

ISP migration process Sketch

Step 1 (Initial implementation process of new-ISP-router install )

A new vlan will be created on the external switch for the new-ISP router Ethernet handoff . Since PIX runs two OSPF processes one for the outside interface and one for the inside interface, the outside OSPF process will not be changed until later, so the new-ISP IP-Block will come as a static route which will be routed through the PIX outside interface ip address which will still be under the OLD-ISP IP block.

Step 2

Once new IP block is successfully routed through PIX-outside interface create new NAT pools and appropriate PAT addresses in the PIX for each of the pools associated with OLD-ISP using the new-ISP IP block. Begin to update each server hosts configured for one-to-one public NAT address associated with OLD-ISP with new-ISP public IP addresses ,once this migration has been completed successfully and tested proceed to step 3.

Step 3 (PIX outside , OLD-ISP and NEW-ISP OSPF processes and routing cutover)

Change IP addresses and routing configuration from the following devices:

PIX-Outside interface: Static routes pertaining to old-ISP Internet router

Stop PIX-OSPF Process on outside interface

Re-IP PIX outside interface with new-ISP ip block. (67.x.x.4)

PIX-Outside interface OSPF process START

Create static route on PIX-outside interface to route New-ISP-router 67.x.x.1 via PIX_outside-67.x.x.4

OLD_ISP-router = Create a static route to route old-ISP 63.x.x.0 block via PIX-outside-67.x.x.4

Kill OSPF process on OLD-ISP router

Remove static route previously enter on new-ISP router if any in reference to old-ISP IP block

Create new OSPF process on new-ISP AT&T router ( OSPF Process )

Ensure default-information originate is configured on AT&T router in order to inject default route into PIX

Start/Enable OSPF process on PIX-outside interface (establish OSPF adjacency between AT&T-router and PIX-outside int.

Thanks

Jorge

Hi Jorge,

Ok I see your topology now.... With 2 different connections to the outside of the PIX I think you will face issues because the PIX doesn't support source-based routing.

But why don't you connect both ISPs to the same router, don't you have enough modules may be?

Regards,

Haitham

Hi Haitham, you are correct.. I called the new ISP today , I wanted to have the new ISP also carry the OLD ISP link as you suggested so that I can have both up from a single router but because the ISP is ATT and they are providing the router as well as managing they indicated they would not want another ISP in their router. So it is actually not my call, I have indicated the PMs that this will then be a hot cutover. I think we can live with re-iping about 25 servers for one-to-one public NAT addresses and update our dns records accordinly. I think I can nail this hut cutover migration, in fact this is the easiest way.

If I have any questions I will definately return with questions.

Regards

Jorge

Good Luck, and sure dont hesitate to come back with questions.

Rgrds,

Haitham