FreeSwan VPN WAN Failover & Cisco PIX

Jose Costa <[email protected]> Wed, 7 Jun 2006 01:42:15 -0300 (ART)
Newsgroups gmane.comp.security.vpn
Message-ID <[email protected]>
Hi all!

I need some help to establish a vpn using linux
freeswan with our customer PIX Firewall (515E).

I=B4ll have 2 Internet links , both with static ip
addresses and about 10 machines behind the linux
gateway that need to access the lan behind PIX box.

The Linux Gateway will have 3 interfaces:
                 ---> WAN1
LAN <--- Gateway |        --> Internet <---PIX --> LAN
                 ---> WAN2

I would like to setup VPN redudancy or load balancing
on Linux Gateway WAN links.

I=B4m thinking about iproute on linux.. But what about
PIX(I do not have one to test)? I think it will not
let me setup 2 Ipsec SA with same LAN addressing on
other side of the tunnel. Is it possible to setup a
secondary IP/Gateway for IPsec like I can do in other
Firewalls?

What would be your recommendations?

Thanks in advance.

Jos=E9 Costa

__________________________________________________
Fale com seus amigos  de gra=E7a com o novo Yahoo! Messenger =

http://br.messenger.yahoo.com/ =