I have a DMZ (off the DMZ-port of the PIX 525 firewall) with the customer routers sitting there. We are using dynamic NAT and static routes on the PIX-firewall. The application we run is FTP - out to the customer servers. The PIX has static ip route for each customer network that uses the customer's router Ethernet which sits in our DMZ as the next hop. What we would like to accomplish now is a fault-tolerant solution, so that if the leased line to the customer router in our DMZ fails we will be still able to connect to the customer's server through our internet connection. What could you recommed me to do to implement this solution?
Since there has been no response to your post, it appears to be either too complex or too rare an issue for other forum members to assist you. If you don't get a suitable response to your post, you may wish to review our resources at the online Technical Assistance Center (http://www.cisco.com/tac) or speak with a TAC engineer. You can open a TAC case online at http://www.cisco.com/tac/caseopen
If anyone else in the forum has some advice, please reply to this thread.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
[toc:faq]Introduction:This document describes details on how NAT-T
works.Background:ESP encrypts all critical information, encapsulating
the entire inner TCP/UDP datagram within an ESP header. ESP is an IP
protocol in the same sense that TCP and UDP are I...