Balance 2 ISP connections for PIX

[ereinoehl]

I have a client with two seperate Internet connections back to AT&T; one Internet only the other Internet and voice. Each connection terminates to a seperate router with seperate WAN and LAN IP ranges. The two Internet routers currently connect to the integrated FastEthernet ports on a 2811 with an HWIC-4ESW and VLAN interface connecting to the PIX. The only way I could see to be able to use both conenctions was to do NAT on the 2811 and staticly translate Public IP ranges to a Private IP address and use the Private IP range on the outside of the PIX. The client also wants to be able to do remote user VPN to the PIX. Is there a better method of doing this?

[trippi]

Do NAT on the PIX.

Do HSRP with the routers, put a switch in between the routers and PIX.

You can use a HSRP address for each WAN IP range. So you'd have to HSRP'd addresses.

[ereinoehl]

The Internet routers are managed by AT&T, and I do not have access to them. I am limited to only manipulating the LAN IP ranges.

The PIX is doing NAT from the 172.16.1x range to the Internal 192.168.100.x.