Re: [FW-1] How to connecto to 2 ISP's?

[Don <don@FW1-NOSPAMBLACKSUN.ORG>]

> BGP4 :
> *ASN (Autonomous System Number)required.
If you go with a single ISP but multiple POP's then your ISP can assign
you a private AS and you do not have to do anything special.

> *Router(s) will need to be beefy enough to handle the extend routes.  (Lots
> of memory)
> BGP will route traffic based on the most efficient route when both links are
> in use, thus they require more than simply a static route the providers
> network peer router.   "Full Routs" may be selected, but more likely
> "Filtered routs" would be appropriate.   Remember for a tier 1 provider,
> full routs could be a huge number.  Any way you cut it, memory and cpu along
> with the ability to run BGP on you access router(s) will be required.
This is why you should seriously consider going with a single larger ISP
and two POP's. You need not worry about route preferences, ASN's, or
router requirements. Although not as fault tolerant as a fully diverse
solution, it provides significantly better reliability than a single
connection, and does nto require the complex BGP knowledge that a more
intricate solution would require.

A 2621 with 2 WIC's and 64 megs of memory is more than enough for a simple
BGP configuration. You can get the bandwidth of 2 T1's, redundancy and
diversity, and you will not have to deal with the full complexities of
BGP. In fact, all you would need from your ISP is the default route.

> *Wont work for Static IP assignments
> If you have remote hosts or applications that bypass DNS and attempt to
> connect to native IP addresses, RADWARE will not affect those connections.
> You would need to endow those hosts/remote apps with the additional
> addresses on your own.  Think  about VPN concentrators etc.
This is the biggest problem. VPN traffic breaks and requires additional
workarounds and complexity.

-Don

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================