Pix 515 2 ISP's Question

Answered Question

I have a customer with a cisco pix 515. Is there a way to have 2 seperate configs on the pix and be able to quickly select which config you want to boot off of? My customer has been having problems lately with his primary ISP which happens to be the faster connection between the 2 and when it goes down he has to manually make the IP changes on the pix to perform the switchover.

Correct Answer by abinjola about 8 years 4 months ago

ok..

I have a customer with a cisco pix 515. Is there a way to have 2 seperate configs on the pix and be able to quickly select which config you want to boot off of?

--YES YOU MAY CONFIGURE YOUR PIX 515E IN MULTIPLE CONTEXT

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00808d2b63.shtml

My customer has been having problems lately with his primary ISP which happens to be the faster connection between the 2 and when it goes down he has to manually make the IP changes on the pix to perform the switchover

--YOU MAY CONFIGURE "DUAL ISP FEATURE".

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806e880b.shtml

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
abinjola Sun, 10/19/2008 - 22:31

ok..

I have a customer with a cisco pix 515. Is there a way to have 2 seperate configs on the pix and be able to quickly select which config you want to boot off of?

--YES YOU MAY CONFIGURE YOUR PIX 515E IN MULTIPLE CONTEXT

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00808d2b63.shtml

My customer has been having problems lately with his primary ISP which happens to be the faster connection between the 2 and when it goes down he has to manually make the IP changes on the pix to perform the switchover

--YOU MAY CONFIGURE "DUAL ISP FEATURE".

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806e880b.shtml

Thanks for the links. I have one more question for you. If my customer has site to site vpn's and remote users connected with the Cisco VPN client and the primary connection goes down and the backup connections comes up with the DUAL ISP Feature will the remote users still be able to VPN in or will they have to have 2 profiles for each external address?

abinjola Mon, 10/20/2008 - 23:20

--you need two profiles on VPN Client

--You need to enable crypto map one each on ISP1 interface and ISP 2 interface

okuehn Sat, 11/22/2008 - 00:34

you can use one profile by setting up the ispbackup interface ip as a backup server in the VPN pcf file.

we have successfully implemented and tested this solution. hope this helps!

Actions

This Discussion