secondary default route on PIX

[thomas_kuhn]

Hello,

we use PIX firewall 6.2(1) in a two stage firewall environment.

Inside firewall is the PIX, outside firewall is a RAPTOR, because internet and e-commerce is more and more important, we are planning to build up a secondary outside firewall for redundancy, is it possible on PIX to configure a secondary default route (gateway) with higher metric for the secondary outside firewall ??

[steve.barlow]

No, Make sure the PIX has only one default route set. Multiple default routes are no longer supported and will cause inconsistent and undesirable results.

Alternate options are HSRP or VRRP or putting a layer 3 switch (eg 2948G-L3) between the other firewalls and the pix and implement routing.

Hope it helps.

Steve