<div>
<div>Dear All,</div>
<div>I am looking for ISP fail over for VoIP network. We have small enterprise VoIP network. If I explain our network bit, Basically we have call manager and unity server in main office with PIX515. All the branch offices has PIX 501. With attached fail over solution I am going to create two tunnels from each branch office and have them connected to each firewall in main office. I think this way if one PIX515 fail at main office, still branch office can be connected through second PIX515. Bellow is the router configuration for routing between two PIX 515. This configuration itself doesn't mean anything without looking at a
diagram.I need to test this but I don't have enough gears with me right now and also I don't have 100% confidence on this. So, I would like to share with you folks. Any comments and ideas would be greatly appreciated.</div>
<div> </div>
<div>Please find the diagram bellow link (Sorry it's han written one )</div>
<div><a href="http://proxy.f2.ymdb.yahoofs.jp/bc/857e55a/bc/bd7f/failover.jpg?bcQM9BFBNirrJIWq">http://proxy.f2.ymdb.yahoofs.jp/bc/857e55a/bc/bd7f/failover.jpg?bcQM9BFBNirrJIWq</a></div>
<div> </div>
<div>best regards,</div>
<div>Manoj</div>
<div> </div>
<div><br>ip cef</div>
<p>!####Establish sla monitors for use in tracking objects####!</p>
<p>ip sla monitor 1<br>type echo protocol ipIcmpEcho <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://174.16.0.1/" target="_blank">174.16.0.1</a><br>threshold 3<br>frequency 5<br>ip sla monitor schedule 1 life forever start-time now
</p>
<p>ip sla monitor 2<br>type echo protocol ipIcmpEcho <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://173.16.0.1/" target="_blank">173.16.0.1</a><br>threshold 3<br>frequency 5<br>ip sla monitor schedule 2 life forever start-time now
<br>!</p>
<p>!####Configure Tracking objects (referencing IP SLA monitor's above)####!</p>
<p>track 101 rtr 1 reachability<br>!<br>track 102 rtr 2 reachability<br>!<br>!<br>!<br>!<br>!####Configure Interfaces with NAT####!</p>
<p>interface FastEthernet 0/1<br>ip address <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://172.16.0.1/" target="_blank">172.16.0.1</a> <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://255.255.0.0/" target="_blank">
255.255.0.0</a><br>ip nat inside</p>
<p>!<br>interface Fastethernet 0/0<br>ip address <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://173.16.0.2/" target="_blank">173.16.0.2</a> <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://255.255.255.0/" target="_blank">
255.255.255.0</a><br>ip nat outside</p>
<p>!<br>interface Fastethernet 0/2<br>ip address <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://174.16.0.2/" target="_blank">174.16.0.2</a> <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://255.255.255.0/" target="_blank">
255.255.255.0</a><br>ip nat outside</p>
<p>!<br>ip classless<br>!####Configure gateway of last resort with tracking objects####!<br>ip route <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://0.0.0.0/" target="_blank">0.0.0.0</a> <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://0.0.0.0/" target="_blank">
0.0.0.0</a> <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://173.16.0.1/" target="_blank">173.16.0.1</a> track 101 <br>ip route <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://0.0.0.0/" target="_blank">
0.0.0.0</a> <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://0.0.0.0/" target="_blank">0.0.0.0</a> <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://174.16.0.1/" target="_blank">
174.16.0.1</a> track 102</p>
<p>!####Configure NAT statements for most outbound traffic####!<br>ip nat inside source route-map ISP1 interface FastEthernet 0/0 overload<br>ip nat inside source route-map ISP2 interface FastEthernet 0/2 overload</p>
<p>!<br>access-list 10 permit <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://172.16.0.0/" target="_blank">172.16.0.0</a> <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://0.0.0.255/" target="_blank">
0.0.0.255</a><br>access-list 101 permit icmp any host <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://173.16.0.1/" target="_blank">173.16.0.1</a> echo<br>access-list 102 permit icmp any host <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://174.16.0.1/" target="_blank">
174.16.0.1</a> echo</p>
<p>!<br>!####Configure route maps for reference in NAT statements####!<br>route-map ISP2 permit 10<br>match ip address 10<br>match interface Fastethernet 0/1<br>!<br>route-map ISP1 permit 10<br>match ip address 10<br>match interface Fastethernet 0/0
<br>! </p>
<p> </p></div><br clear="all">