Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Pix 515 2 ISP's Question

I have a customer with a cisco pix 515. Is there a way to have 2 seperate configs on the pix and be able to quickly select which config you want to boot off of? My customer has been having problems lately with his primary ISP which happens to be the faster connection between the 2 and when it goes down he has to manually make the IP changes on the pix to perform the switchover.

1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: Pix 515 2 ISP's Question

ok..

I have a customer with a cisco pix 515. Is there a way to have 2 seperate configs on the pix and be able to quickly select which config you want to boot off of?

--YES YOU MAY CONFIGURE YOUR PIX 515E IN MULTIPLE CONTEXT

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00808d2b63.shtml

My customer has been having problems lately with his primary ISP which happens to be the faster connection between the 2 and when it goes down he has to manually make the IP changes on the pix to perform the switchover

--YOU MAY CONFIGURE "DUAL ISP FEATURE".

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806e880b.shtml

5 REPLIES
Cisco Employee

Re: Pix 515 2 ISP's Question

ok..

I have a customer with a cisco pix 515. Is there a way to have 2 seperate configs on the pix and be able to quickly select which config you want to boot off of?

--YES YOU MAY CONFIGURE YOUR PIX 515E IN MULTIPLE CONTEXT

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00808d2b63.shtml

My customer has been having problems lately with his primary ISP which happens to be the faster connection between the 2 and when it goes down he has to manually make the IP changes on the pix to perform the switchover

--YOU MAY CONFIGURE "DUAL ISP FEATURE".

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806e880b.shtml

New Member

Re: Pix 515 2 ISP's Question

Thanks for the links. I have one more question for you. If my customer has site to site vpn's and remote users connected with the Cisco VPN client and the primary connection goes down and the backup connections comes up with the DUAL ISP Feature will the remote users still be able to VPN in or will they have to have 2 profiles for each external address?

Cisco Employee

Re: Pix 515 2 ISP's Question

--you need two profiles on VPN Client

--You need to enable crypto map one each on ISP1 interface and ISP 2 interface

Bronze

Re: Pix 515 2 ISP's Question

you can use one profile by setting up the ispbackup interface ip as a backup server in the VPN pcf file.

we have successfully implemented and tested this solution. hope this helps!

Cisco Employee

Re: Pix 515 2 ISP's Question

multiple context does not support static route tracking,alternatively isp fallback.

So,you would not be able to run both simultaneously.

http://www.cisco.com/en/US/docs/security/asa/asa72/command/reference/t_72.html#wp1382341

command : track rtr

Regards,

Sushil ;-)

243
Views
0
Helpful
5
Replies
CreatePlease to create content