Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Load Balancing PIX

I've got 2 sets of PIX 525s (4 total) and am looking for effective options to load balance traffic between the two sets. I have redundant Internet connections with two 7200 border routers. Does anyone have any experience with this and/or ideas for an effective solution?

3 REPLIES

Re: Load Balancing PIX

I can think of 4 methods:

1) have static routes pointing to the active PIX IP of each set (ie core has 2 default routes pointing to the PIXs). As this is the internet, use the default of load balancing per destination. If one fails PIX, the failover PIX takes over. If both PIXs fail, the static drops from the router and only uses the active set. Works well for LAN side failures. 7200s can have statics pointing to each PIX pair. Run MHSRP on the 7200s and have one PIX point to one HSRP active router and one PIX pointing to the other.

2) Have the PIXs advertise a default RIP route ("rip inside default"), that way your core will receive 2 default routes and can load balance that way (based on hop count, so make sure hops are equal - use "offset-list" command if necessary). You can run RIP on your network between your core and the PIXs (or if you are already using another protocol you can redistribute between it and RIP if necessary). If one PIX fails, the failover takes over advertising the default RIP route. If that set fails, the other PIX is still advertising the default route. Have the PIXs and 7200s run RIP between them (use authentication in this case as well).

3) Use policy-routing on your core pointing half your network at one PIX pair and half pointing at the other PIX pair. On the PIX/7200 side, run RIP or static routes/MHSRP as per above.

4) Create a tunnel between your core routers and the 7200s and run a protocol (eg EIGRP) over it and load balance that way. If one pair fails or if a 7200 fails, EIGRP will detect it and route over the other.

Hope it helps.

Steve

New Member

Re: Load Balancing PIX

You can use a CSS for a high availability solution.

http://www.cisco.com/warp/customer/117/fw_load_balancing.html

-Jonathan

e.l
New Member

Re: Load Balancing PIX

Anyone tried with Alteon or Radware ?

97
Views
0
Helpful
3
Replies
CreatePlease login to create content