Re: [FW-1] multiple external interfaces on firewall

[Trunkwala Qutub <kutubjt@FW1-NOSPAMYAHOO.COM>]

There are possible ways to loadbalance traffic to
multiple external leased lines. But for that you need
additional hardware like a Cisco Router. You need to
connect multiple leased lines to Cisco router and put
your firewall behind the router. (Its apparant that
you need multiple serial interfaces on the router). If
you need full control over which traffic  should go
through which leased line, lets say all HTTP traffic
should go through Line1 and all other traffic should
go through Line2 then you need a seven layer switch
like TopLayer (http://www.toplayer.com/) with some
additional router.

I hope it has helped you.

Best Regards
Qutubuddin Trunkwala
IT Security Engineer
COMSEC
Dubai (UAE)

--- "Marques, Ricardo" <ricardo.marques@PT.UNISYS.COM>
wrote:
> I.
>
> In my experience i think that is not possible to
> have more than one external
> interface in the firewall-1. One of the interfaces
> is external and all the
> others are internal, because you have only one
> "default gateway", all the
> traffic that is not internal is sent to that
> gateway.
>
> This is my opinion, but if someone else knows how to
> do it, i'll apreciate
> the information.
>
> Ricardo Marques
>
> -----Original Message-----
> From: Daniel Johnson
> [mailto:danny.johnson@VERIZON.COM]
> Sent: quarta-feira, 6 de Março de 2002 16:11
> To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com
> Subject: [FW-1] multiple external interfaces on
> firewall
>
>
> Just a sanity check....
>
> Is there ever a reason to implement multiple
> external
> interfaces (for internet access) on the same
> firewall?
>
> If so, how would one go about routing specific
> address
> ranges out the desired interface?
>
> Thanks
>
> Danny
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to LISTSERV@lists.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner@ts.checkpoint.com
> =================================================
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to LISTSERV@lists.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner@ts.checkpoint.com
> =================================================


__________________________________________________
Do You Yahoo!?
Try FREE Yahoo! Mail - the world's greatest free email!
http://mail.yahoo.com/

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================