RE: [FW1] FW-1, can it support 2 leased line connection to Intern et

["Ellington, Chris, BmS - NMI-CK" <Chris.Ellington@FW1-NOSPAMbmsus.com>]

That configuration is very possible and fairly simple to configure.
Assuming you have the same ISP going into router 1 and router 2, then all
you need is BGP.  Or possibly no BGP and static routing on the provider's
side. 

Why would you ever consider such a config, though?   Circuits are full
duplex, so you would fill up the router1 pipe with inbound and the router2
pipe with outbound.  

But the original question is a bit more perplexing - what type of connection
is being made to the internet?  It would appear from the drawing that the
firewall boxes are connected directly to the internet via a T1 card or via a
LAN and the answer would be different depending on how it is actually
configured.

chris
-----Original Message-----
From: MIS [mailto:trang@omnitech.com]
Sent: Friday, September 15, 2000 9:53 AM
To: FW1 mailinglist
Subject: RE: [FW1] FW-1, can it support 2 leased line connection to
Internet



Have anybody ever thought of this configuration?
(or have succesfully made it work)

Routing and NAT on router1, router2, and firewall
may make this happen


 Internet          Internet
    |                 | 
  Router1           Router2
    |                 |
    |in               |out
    |________   ______|
             | |
             | |
            Switch
              |
              |
           Firewall ---- DMZ
              |
              |
      Internal network

-----------------------------------------------------------


Hi all you experts,

I have got some question regarding increasing of the
number of Internet connection that can be handled by
FW-1. Currently (shown in Fig 1), we have a Checkpoint
Firewall FW-1 running with a single connection to the
internet. 

		     Internet
			|
			|
			|
		-----------------
		|   Checkpoint	|      DMZ
		|    Firewall	|------------------
		|      FW-1     |
		-----------------
			|
			|
			|
		Internal network

                     Fig. 1

But we would like to add another leased line to
connect our network to the Internet (ie 2 leased line
to the Internet). I would like to find out if it is
possible to use the same Firewall FW-1 to connect to
the Internet as shown in Fig 2. Have any of you done
this before, if this is possible, could you advise me
on how I could do it. Any help is greatly appreciated.
Thanks. 

             Internet             Internet
         (first connection)   (second connection)
                 |                 |
                 |                 |
                 |                 |    
                ---------------------
                |   Checkpoint      |    DMZ
		|    Firewall       |----------------
                |      FW-1         |
                ---------------------
                        |
                        |
                        |
                 Internal network

                     Fig. 2
               


Thanks in advance.
A. Page



============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================