Hello,
I would like to know if the following scenario will work properly. Let's say we have one TS server. The TS server has only 1 nic which is connected to a switch. On the switch, there are two Cisco Pix firewalls and each Cisco Pix firewalls are hooked up to a different Internet link. The default gateway on the nic of the TS server points to the first Pix firewall.
Case 1
A RDP connexion comes in from the FIRST Internet connexion, going through the first pix firewall then onto the TS server which is ok so far. The response from the TS is then sent to it's default gateway which is pix on first internet connexion and happily returns back to the client.
Case 2
A RDP connexion comes in from the SECOND Internet connexion, going through the second pix firewall then onto the TS server which is ok so far. WHAT happens to the response from the TS ? Since the connexion from the client comes through the second pix, will the reponse be returned to the second pix and back to the client or will it take the default gateway of the nic on the TS server and go to the FIRST pix and end there ?
Solution 1
It works as is and need nothing changed.
Solution 2
Put in 2 nics and each have it's default gateway pointing to a single Pix.
Solution 3
Put in a Cisco Router and have both pixes feed into the Router then, have the router connected to the TS server (via a switch of course)
Solution 4
Have the 2 Internet lines feed into the Cisco Router and then into a Pix Firewall. Then have the Pix firewall connected to the TS server.
Solution 1 is the easiest but not sure how it will react
Solution 2 should work and cost very little
Solution 3 is the most costly and *should* work
Solution 4 is less costly then solution 3 and should *also* work.
If you are wondering why 2 Internet connexions, well we think the DSL connexion (4Meg Down/800K Up) will quickly be satured with 20/30 users all using RDP and doing printing. According to the application developper, each session will require 56k of bandwidth. Customer doesn't want to pay for sDSL 5Meg or T1/T3.
Thanks
akwong
I would like to know if the following scenario will work properly. Let's say we have one TS server. The TS server has only 1 nic which is connected to a switch. On the switch, there are two Cisco Pix firewalls and each Cisco Pix firewalls are hooked up to a different Internet link. The default gateway on the nic of the TS server points to the first Pix firewall.
Case 1
A RDP connexion comes in from the FIRST Internet connexion, going through the first pix firewall then onto the TS server which is ok so far. The response from the TS is then sent to it's default gateway which is pix on first internet connexion and happily returns back to the client.
Case 2
A RDP connexion comes in from the SECOND Internet connexion, going through the second pix firewall then onto the TS server which is ok so far. WHAT happens to the response from the TS ? Since the connexion from the client comes through the second pix, will the reponse be returned to the second pix and back to the client or will it take the default gateway of the nic on the TS server and go to the FIRST pix and end there ?
Solution 1
It works as is and need nothing changed.
Solution 2
Put in 2 nics and each have it's default gateway pointing to a single Pix.
Solution 3
Put in a Cisco Router and have both pixes feed into the Router then, have the router connected to the TS server (via a switch of course)
Solution 4
Have the 2 Internet lines feed into the Cisco Router and then into a Pix Firewall. Then have the Pix firewall connected to the TS server.
Solution 1 is the easiest but not sure how it will react
Solution 2 should work and cost very little
Solution 3 is the most costly and *should* work
Solution 4 is less costly then solution 3 and should *also* work.
If you are wondering why 2 Internet connexions, well we think the DSL connexion (4Meg Down/800K Up) will quickly be satured with 20/30 users all using RDP and doing printing. According to the application developper, each session will require 56k of bandwidth. Customer doesn't want to pay for sDSL 5Meg or T1/T3.
Thanks
akwong
