The WAN links are inside the firewall. (behind NAT)  We have four T1's in
BGP at one site, two T1's in BGP at the other.  The chances of a complete
outage at either end that is not the result of a backhoe is pretty slim.  In
the event of the backhoe I'm sure that my P2P links will be down as well
anyway.  I just want to be able to say that if, for example, my Internet
router dies at one end the traffic can route back through the PRO network to
the other site's connection.  It sounds like that is possible.  I'll just
have to get the old Watchgaurd out of the picture at the older site. ;)

Chris Green


-----Original Message-----
From: Reasoner, Bob (PHES) [mailto:[EMAIL PROTECTED] 
Sent: Thursday, February 17, 2005 3:26 PM
To: Chris Green
Subject: RE: [gb-users] Gateway Selector 

Will your WAN links have a router that has an intelligent routing
protocol?  If so you can do what you want by costing different links
etc.

Bob 

-----Original Message-----
From: Chris Green [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, February 16, 2005 1:29 PM
To: [email protected]
Subject: RE: [gb-users] Gateway Selector 

If it was outside the firewalls I would just do some cool stuff with the
P2P links and the routers directly.  I'm just hoping that I can gain
some additional redundancy here.  Both sites will have fully redundant
links protected by BGP anyway; so it's a long-shot for them all to be
down.

Chris


-----Original Message-----
From: Christopher A. Congdon [mailto:[EMAIL PROTECTED]
Sent: Wednesday, February 16, 2005 1:18 PM
To: [email protected]
Subject: RE: [gb-users] Gateway Selector 

I think if you put the WAN on the EXT of the firewalls it would work.
However, to gain access into both systems from either location, you'd
need to set up a point to point VPN which would waste bandwidth
unnecessarily. However, from a security standpoint you'd be OK because
both sides of the WAN would be protected by a firewall.

Just thinking out loud here... Maybe there's a much better way of doing
this, but since I've never done something like this before, I have no
idea for sure.

Chris

> -----Original Message-----
> From: Chris Green [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, February 16, 2005 14:11
> To: [email protected]
> Subject: [gb-users] Gateway Selector
>
> I am currently expanding a church to an additional campus.  We are 
> planning to put additional internet connectivity at that location with

> its own firewall.  We will also have a WAN link between the locations.

> Is it possible to use the gateway selector on the firewall to route 
> across
the
> WAN
> through the other firewall in the event of an internet outage at
either
> location?  Assume that both sides are GB-Ware 3.6.1.
>
> Thanks,
> Chris Green
>
> ------------------------------------------------------
> To unsubscribe:           [EMAIL PROTECTED]
> For additional commands:         [EMAIL PROTECTED]
> Archive:  http://archives.gnatbox.com/gb-users/

------------------------------------------------------
To unsubscribe:           [EMAIL PROTECTED]
For additional commands:         [EMAIL PROTECTED]
Archive:  http://archives.gnatbox.com/gb-users/


__________ NOD32 1.999 (20050215) Information __________

This message was checked by NOD32 antivirus system.
http://www.nod32.com

------------------------------------------------------
To unsubscribe:           [EMAIL PROTECTED]
For additional commands:         [EMAIL PROTECTED]
Archive:  http://archives.gnatbox.com/gb-users/



__________ NOD32 1.1000 (20050216) Information __________

This message was checked by NOD32 antivirus system.
http://www.nod32.com

------------------------------------------------------
To unsubscribe:           [EMAIL PROTECTED]
For additional commands:         [EMAIL PROTECTED]
Archive:  http://archives.gnatbox.com/gb-users/

Reply via email to