We are needing to have two ISP's in diverse locations. Our main site in dallas currently has an ISP. We need to employ an ISP in our Houston location as well. These two sites are connected via frame relay. We have the basic PIX, DMZ and LAN connection in the dallas location. If this connection drops for whatever reason, we would like to have outside users resume access via houston. The problem is that we host our sites in dallas. What kind of configuration(s) do you suggest? Security being the main consideration.
Sounds like you need to get an ASN and run BGP with your ISPs. This is not difficult and does not require "big iron" for routers if you just accept a default route from each (and redistribute it into your routing protocol). See the white paper on multihoming on my web site for some other alternatives and a general discussion. See Chapter 8 of my book High Availability Networking with Cisco for a more detailed discussion (and example configurations, none of which exactly match your configuration). See Halabi's book Internet Routing Architectures for everything you could possibly want to know about BGP :-).
I have implemented this for several clients, and the most time consuming part is usually filling out the paper work to get the Autonomous System number assigned, followed by babysitting the routers while each ISP turns up BGP for you. If done properly, no down time is required. The only potential sticking point is if you are currently using a public address range smaller than a class C which cannot be expanded to at least a full class C (/24 prefix) that both ISPs are willing to advertise to the rest of the world.
Question We run asr9001 with XR 6.1.3, and we have a very long delay to
login w/ SSH 1 or 2 to the device compare to IOS device. After
investigation, the there is 1s delay between the client KEXDH_INIT and
the server (XR) KEXDH_REPLY. After debug ssh serv...
Introduction The purpose of this document is to demonstrate the Open
Shortest Path First (OSPF) behavior when the V-bit (Virtual-link bit) is
present in a non-backbone area. The V-bit is signaled in Type-1 LSA only
if the router is the endpoint of one or ...
Hi, I am seeing quite a few issues with patch install and wanted to
share my experience and workaround to this. Login to admin via CLI, then
access root with the “shell” command Issue “df –h” and you’ll probably
see the following directory full or nearly ...