I found out that the best practice in those cases (when you want multiply
ISPs but no headaches) is to use Linkproof by radware.
It will allow connecting your two routers to the linkproof while maintaining
one default gateway on the firewall with no routing hasels.
The added bonus is that the linkproof will maintain a local DNS server witch
will  answer the dns requests from the different ISPs correctly.
The problem is it will cost you :)

-----------------------

Regards,
       Mishka
                WAN R&D team

-----------------------
E-Mail: [EMAIL PROTECTED]        Tel: 04-8560600
Home Page: www.netvision.net.il        Fax: 04-8550345

TeleSales:             04-8560560     [EMAIL PROTECTED]
WAN Support:      04-8560550      [EMAIL PROTECTED]
Dial-up Support:   04-8560570     [EMAIL PROTECTED]
Administration:     04-8560660     [EMAIL PROTECTED]

NetVision Ltd.
The No.1 Israeli Internet & Intranet Services Provider
-----------------------

-----Original Message-----
From: Hui Stony [mailto:[EMAIL PROTECTED]]
Sent: Monday, June 05, 2000 3:30 AM
To: [EMAIL PROTECTED]
Subject: [FW1] Two Lan cards for Internet connection


We are going to add one more internet connection on the existing FW-1
gateway which is NT4 sp5 config with
one NIC for internal LAN, one NIC for DMZ and one NIC for Internet
connection for email and Web.

But one of the FW vendor's engineer say it is ok just add one more NIC on
the FW1 and coonect to another ISP.
But the other FW vendor 's engineer say it would be problem for a FW1
connect with two NIC for two ISP since
there is only one default gateway can apply so the email may go through one
ISP out but come back from the other
ISP !?

Would that be a problem to connect two NIC into the FW1 for Internet email
??
Will FW1 keep the session or state for email connection ??
If so, what alternative available ?! Forward all the mail to external SMTP
agent  or Forward all Internet Web browsing
to external Proxy ?

Any idea and reference link is welcome !  Thank you !


GEMEX TRADING LIMITED
Stony Hui
IT Services  (Network Support Officer)

Visit GEMEX in the Metro-Intranet

@ http://home.gemex-ag.com




============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================

Reply via email to