I was recently informed that we require a dedicated point-to-point T1 circuit with a business partner. They are handling the circuit and are managing the routers at my location, but I need to know how to allow machines on my internal network to access resources across this new dedicated point-to-point circuit.
My existing network is setup as follows -
There are two T1's coming into two separate routers:
- From router A, an ethernet cables plugs into the back of a loadbalalancer device.
- From router B, an ethernet cable plugs directly into a switch on VLAN1.
- The loadbalancer has an ethernet cable plugging into VLAN1 as well.
- The PIX firewall is also plugged into VLAN1. The PIX uses the loadbalancer as the default gateway to access the internet.
- All internal machines reside behind the firewall and are using the firewall's internal IP as their gateway.
I currently have several site-to-site connection on my firewall, therefore its imperative that my internal machines continue to use this as their gateway. Also, I would like to put a firewall behind the routers for this dedicated circuit to protect my internal resources from their network.
Hope this gives some insight. Please let me know what options I should explore.
My existing network is setup as follows -
There are two T1's coming into two separate routers:
- From router A, an ethernet cables plugs into the back of a loadbalalancer device.
- From router B, an ethernet cable plugs directly into a switch on VLAN1.
- The loadbalancer has an ethernet cable plugging into VLAN1 as well.
- The PIX firewall is also plugged into VLAN1. The PIX uses the loadbalancer as the default gateway to access the internet.
- All internal machines reside behind the firewall and are using the firewall's internal IP as their gateway.
I currently have several site-to-site connection on my firewall, therefore its imperative that my internal machines continue to use this as their gateway. Also, I would like to put a firewall behind the routers for this dedicated circuit to protect my internal resources from their network.
Hope this gives some insight. Please let me know what options I should explore.