Quantcast
Channel: All ScreenOS Firewalls (NOT SRX) posts
Viewing all articles
Browse latest Browse all 2577

Re: Dual Internet links Failover and load balancing on SSG-140

$
0
0

Hi,

 

If you have DNS mapping for the MIP/VIP ips and their A records can be updated dynamical then I don't see any issue. Only you need to consider if there is any asymmetric routing, e,g, traffic cames on the ISP1 and return traffic tries going out via ISP2.

 

To avoid asymmetric routing you can try using 'unset flow reverse-route clear-text" so the mac of incoming traffic will be cached and return traffic will be sent via same interface.

 

Thanks,

Vikas


Viewing all articles
Browse latest Browse all 2577

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>