Re: [FW-1] Two ISPs

[Manish Garg <maga@FW1-NOSPAMLOC.GOV>]

Hi,

If you are in the mood of spending....Radware Linkproof is a very good
product which automatically takes care of providing redundancy to incoming
and outgoing traffic. I am using it for quite some time. For more info have
alook on http://www.radware.com

MG

-----Original Message-----
From: Raymond N [mailto:OutMail@ARDENNET.COM]
Sent: Friday, August 01, 2003 10:49 PM
To: FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM
Subject: Re: [FW-1] Two ISPs


First of all, you should think the inbound and outbound of the Internet
connection individually. Secondly, in most cases it is okay to have your
inbound traffic coming via the new ISP link, when outbound is via the old
ISP link, during the migration period.

When your inbound traffic would be via the new ISP is based on when your new
ISP starts to advertize your /24, and when your old ISP stop advertizes your
/24.  And it is okay that in a short period of time both of them are
advertizing your /24.

For outbound, I would set the default route using my new ISP link, if the
link is up now.  As stated, it is okay to have outbound via your new ISP
while inbound is still on the old link.  The priority setting in Nokia for
the route is useful only if one of the link is down (layer-2), and will do
nothing for any things happening at layer-2 (e.g. route change).

Finally, when your new ISP is advertizing your /24, and you know your old
ISP is not advertizeing the /24, you can shutdown your old ISP link to
finish the migration.

BTW, BGP is good for both fail-over and load-sharing.

-raymond



At 10:44 AM 8/1/03 -0500, you wrote:
>We are currently switching ISP and must reroute the /24 network we own.
>Is there any way to configure these lines to work together as the route
>change is taking effect with Internic?
>
>I wasn't sure if this would work:
>1) Configure both interfaces as default routes with old ISP higher
>priority (Is this how static routes priority works on Nokia?)
>2) As soon as the route change takes effect traffic should continue on
>new line (Or will our network traffic still go outbound on old line
>because of
>priority?)
>
>The only need for BGP would be if one line went down so all our subnets
>could work on both ISPs, correct?
>
>Any help on this matter would be greatly appreciated.
>
>Brad Pinkston
>Firewall/Network Administrator
>Checkpoint CCSA
>Centenary College of LA
>>bpinksto@centenary.edu
>
>
>
>--------------------------------------------------------------------
>This email has been scanned for viruses by Centenary College of LA
>
>=================================================
>To set vacation, Out-Of-Office, or away messages,
>send an email to LISTSERV@amadeus.us.checkpoint.com
>in the BODY of the email add:
>set fw-1-mailinglist nomail
>=================================================
>To unsubscribe from this mailing list,
>please see the instructions at
>http://www.checkpoint.com/services/mailing.html
>=================================================
>If you have any questions on how to change your
>subscription options, email
>fw-1-owner@ts.checkpoint.com
>=================================================
>

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV@amadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV@amadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================