Re: [FW-1] How to connecto to 2 ISP's?

[Ramesh Ragineni <rragineni@FW1-NOSPAMILOG.COM>]

> -----Original Message-----
> From: Mailing list for discussion of Firewall-1
> [mailto:FW-1-MAILINGLIST@beethoven.us.checkpoint.com]On Behalf Of Don
> Sent: Monday, June 03, 2002 8:21 AM
> To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com
> Subject: Re: [FW-1] How to connecto to 2 ISP's?

> The problems are as follows:
> When connecting to two different ISP's there is no way to acheive load
> balancing. You will also need to get a portable Class C
> address space and  get two ISP's to cooperate on the BGP side. This is
never easy.
>
> You may find it sufficient to go with 1 larger ISP and two internet
> connections to them.
>
> Many of my customers have connections through companies like
> UUNet with 1 line connected to one POP and the second line to a different
> POP. By doing this, you do not need to get a portable class C, a Public AS
> number, etc. and you still get good redundancy. You can also do either
> load sharing or simple failover with such a situation.
>
> BGP is a lot cheaper than a hardware solution such as RadWare
> or FatPipe.
>
> BGP can also provide redundancy for SR connections and VPN
> connections. The FatPipe and Radware boxes can not provide VPN redundancy
> unless you  purchase a box for every location. They also can not provide
> SecuRemote  redundancy.


I totally agree with this solution: Instead of going to two different ISP, I
would say going through a Larger ISP with two different POP locations, will
give pretty much good redundancy and BGP will be much much cheaper for you
to use. You can do lot of things like secure redundancy, spliting the
traffic or diverting in incoming and out going traffic, VPN traffic ...etc.
This solution, Iam in a process of implementing using UUNET two different
POP locations with BGP next week. I have taken this decission, after going
through lot of research.


-Ramesh

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================