04-29-2012 11:34 PM
I'm trying to figure out the best way to use 2 ISP's at the same time for redundancy.
I believe ECMP will cause problems for me because I'm using NAT. Source routing will be problematic because I have multiple inside interfaces (internal subnets wouldn't be able to see each other). I could use PBR. But I think simple static routes could work.
Instead of using default routes, I'll do this:
Solved! Go to Solution.
04-30-2012 04:45 AM
04-30-2012 01:53 PM
Inbound services will probably work fine. You can check how the firewall handles reverse routing by issuing the command:
get flow | include clear-text
The default setting is "prefer reverse route", which means that the firewall will first try to find a route back to the originating host. If there is no active route, then packets are sent back through the incoming interface to the MAC-address where packets came from (upstream router).
You can change the default behavior as follows:
set flow reverse-route clear-text always (always do a reverse route lookup)
unset flow reverse-route clear-text (no route lookup, always use the cached MAC-address)