A company I do some work for currently has a single SDSL line going into a Cisco 2600 which goes to a Pix which static maps a few of their external ips to internal ips, and also connects to the rest of their internal network. They are adding a second SDSL line through a second ISP for load sharing/balancing and also for the (outbound) redundancy. I realize 2 t1's and running BGP would be the best bet for this, but this would be too expensive/complicated for this organization. My first thought was that this would be a fairly simple task, just setup policy based routing on the 2600 between the links. Then I realized that there was no way for the 2600 to detect when one of the dsl lines is down, because the ethernet interface connected to one of the DSL modems will always show as up/up as long as the modem is on. Am I right in thinking this won't work, or is there any way around this?
My first thought for a solution to this would be to use some kind of linux/unix box instead of the 2600. Although I have no idea if I can, I'm assuming there is some way to do it. My thought would be to have 3 NICs in it, one for each dsl modem, one connected to the Pix. Then have the nix box somehow split the outgoing packets between both dsl links. Is this possible? If so how could I do it, can I do it with just route statements, or maybe using ipf or ipfw? Maybe have everything from 0.0.0.0 to 127.255.255.255 route out one interface and then have everything else route out the other?does this make sense? What one guy over there would prefer is that all their users traffic goes out one dsl link, and all the traffic from their website goes out the other, then when one of the links goes down both share one link?this sounds a lot more complicated...but is this also possible? Then I would run some kind of cronjob every minute or so to check if the both dsl interfaces are up, and if one is down, make the other one the default route. Does this all sound plausible? Any suggestions/tips/hints? will be greatly appreciated.
Thanks in advance.
My first thought for a solution to this would be to use some kind of linux/unix box instead of the 2600. Although I have no idea if I can, I'm assuming there is some way to do it. My thought would be to have 3 NICs in it, one for each dsl modem, one connected to the Pix. Then have the nix box somehow split the outgoing packets between both dsl links. Is this possible? If so how could I do it, can I do it with just route statements, or maybe using ipf or ipfw? Maybe have everything from 0.0.0.0 to 127.255.255.255 route out one interface and then have everything else route out the other?does this make sense? What one guy over there would prefer is that all their users traffic goes out one dsl link, and all the traffic from their website goes out the other, then when one of the links goes down both share one link?this sounds a lot more complicated...but is this also possible? Then I would run some kind of cronjob every minute or so to check if the both dsl interfaces are up, and if one is down, make the other one the default route. Does this all sound plausible? Any suggestions/tips/hints? will be greatly appreciated.
Thanks in advance.