×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

bypass pix

Answered Question
Mar 30th, 2012
User Badges:

I am hoping someone can help me here. I want traffic originating from our video conference setups to be directly routed to my outside switch, completely bypassing our PIX.

We currently have a 250 MB pipe and our PIX is struggling with that amount of data coming through it. We are getting an ASA but not until the beginning of next school year. Here is my set up and hopefully someone can help me get this accomplished.


VideoConference--->2560---->6509------>ContentFilter------->InsideSwitch------>PIX----->OutsideSwitch------->ISP-Router


Thanks

jp

Correct Answer by Vivek Ganapathi about 5 years 4 months ago

I would suggest to have a direct link from your 6509 to the ISP router. Hope you have an interface available to do this. If available, then configure the interface on 6509 as routed port --> Assign it an IP address & then configure policy based routing to have all your VC traffic going via the newly created link.


Hope this helps.


Thanks

Vivek

Correct Answer by Kyle McKay about 5 years 4 months ago

You will need an alternative path from 6509 or inside switch to the outside switch. With this path in place you can use policy based routing to force VC traffic through that path rather than to the PIX.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (2 ratings)
Loading.
Correct Answer
Kyle McKay Fri, 03/30/2012 - 14:02
User Badges:
  • Bronze, 100 points or more

You will need an alternative path from 6509 or inside switch to the outside switch. With this path in place you can use policy based routing to force VC traffic through that path rather than to the PIX.

thomas.satafer.fan Fri, 03/30/2012 - 17:54
User Badges:

Maybe you could try to create a tunnel (GRE or VPN) between 6509 and OutsideSwitch, if you have access to those switches, and encapsulate VC traffic into it.

Correct Answer
Vivek Ganapathi Sat, 03/31/2012 - 05:36
User Badges:
  • Silver, 250 points or more

I would suggest to have a direct link from your 6509 to the ISP router. Hope you have an interface available to do this. If available, then configure the interface on 6509 as routed port --> Assign it an IP address & then configure policy based routing to have all your VC traffic going via the newly created link.


Hope this helps.


Thanks

Vivek

Actions

This Discussion