|
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [FW1] Off topic - One firewall, two ISP's, automatic failover for VPN pos sible ?
Title: RE: [FW1] One firewall, two ISP's, automatic failover for VPN pos sible ?
See
the whatepaper on www.radware.com
concerning the Linkproof and it's abilities. I think all of your questions
will be answered there.
WARNING: Off-topic LinkProof
question
I
have heard LinkProof referred to many times as a direct replacement to
BGP. This seems viable for outbound connections, but I don't understand
how such a device could provide inbound redundancy. I guess the closest
thing you could use would be round robin DNS, providing about 50% failure rate
during an outage. However, I can accomplish that same 50% failure rate
without the help of LinkProof during an outage. Even if LinkProof
somehow dynamically modified the DNS tables, you're still up against caching
servers on the internet that are designed to ignore TTLs and hold on to
invalid records.
Am I
missing something?
Radware's Linkproof can do that without the hassle of BGP. I
talked to Rainfinity about their Rainwall product doing that, but they will
only balance outbound connections so it is not really a viable solution.
Anyone else know another product to load balances ISP I would appreciate
hearing about them. Only solutions that work in both directions.
-----Original Message----- From:
Chris Arnold [mailto:[email protected]]
Sent: Thursday, March 01, 2001 6:54 AM To: 'Markus Gruenkorn '; '[email protected]
' Subject: RE: [FW1] One firewall, two ISP's,
automatic failover for VPN pos sible ?
Talk with your ISPs about running BGP on your lines and
advertising each other's routes.
Chris
-----Original Message----- From:
Markus Gruenkorn To:
[email protected] Sent:
3/1/01 5:04 AM Subject: [FW1] One firewall, two
ISP's, automatic failover for VPN possible ?
Hi, we currently use a nokia IP440
at one and several VPN220 at about 8 other different
locations . We have access to two ISP´s. Is it
possible to configure our nokia that the VPN is
switched from one provider to another if one
provider goes down . Anyone out there has a similar
configuration ? I know that a HA solution is
possible with two firewalls and VRRP but i dont find
any information about using one forewall and two ISPs. Thanks
========================================================================
========
To unsubscribe from this mailing list, please see the instructions
at
http://www.checkpoint.com/services/mailing.html
========================================================================
========
================================================================================
To unsubscribe from this mailing
list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
|
|