Re: [FW1] Multilple T1's from different ISp's

["Joe Pampel" <joe@FW1-NOSPAMardsley.com>]

Hi David:

Couple tips that have worked well for us:

1. make sure 2nd T has *different* local loop provider if at all possible
2. make sure 2nd T goes to *different* POP/CO etc. (make sure your two don't share space..)

For ex in our NY office one internet T1 went to the Verizon pop downtown, the other routes to Newark, NJ.
The downtown T was out for 3 weeks (it's a miracle it's back at all IMHO). Verizon still has (reportedly) about
1,000 T3's out. This is the extreme case obviously, but it has come in handy about 6 times this year for us.

You don't need a 2nd nic, you should just need a 2nd WIC-1-CSU card for the 3600.
 
Not sure how the NAT bit will work in your case; in ours we applied to ARIN for an ASN, got portable IP's from our main
ISP and are running BGP to handle multiple connections.  You can use statics to get to >1 ISP's
(check archives for a bunch of threads on that). Probably a bunch of ways to NAT I would think.. 
You could always get a small block of portable IP's for your router and DMZ, use one of them as the "outside" address on the FW and NAT in Checkpoint. That would simplify the routing a lot IMHO vs NATing in the router. (not sure where you NAT at the moment) You just get from the FW to the router and let the router worry about which T to take.. 

hope that helps a little

- Joe


>>> David Frank <david@datachannel.com> 10/02/01 07:45PM >>>
 

Greetings,
 
We are getting ready to bring in a second T1 line from another ISP. Will I
need another Nic interface for the new line? We want to run Dual redundant
T1's to increase bandwidth and reliability. Also, How will this affect
Many-to-one NAT? Will I need to add another IP address and NAT object for
internet access?
 
Environment:
 
Sun 220 running CP 4.1 Sp4. Solaris 2.7. 
 
Cisco 3600 router for internet.
 
Thanks again for any assistance and advice you can provide,
 
David Frank




================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================