EMV and RAMP and multiple ISP's

Former Member
Former Member $organization

I am in the process of implementing EMV (chip readers) in my RAMP environment. Here is my challenge. I currently have my firewall configured with multiple ISPs so that when my primary ISP fails everything switches over to my secondary ISP. While this breaks the connection to Tessitura it enables things to keep going just by relogging in.  There so many things (finance system, email, server backups) being dependent on internet access I feel this has been a necessary solution.  Along comes EMV and it requires that each workstation in the box office with an EMV reader to have it's own public IP address. This is fine as long as the primary ISP is working but losing ALL internet access for box office workstations is not good if the primary ISP goes down. I have thought about routing some 3 of the 6 box office PC's to the secondary ISP but that means it would be possible to have half of the PC's go down at a time. This doesn't sound good either.  

I did find a companies that offer an SD-WAN solution that aggregate the ISP's and provide redundancy.  The company would offer me 7 ip addresses 6 for my box office and another for ip for my firewall to NAT all the other workstations. The main company I am looking at now is called Big Leaf.

I hope someone can offer another solution.

Thanks,

Jason Song

Scottsdale Arts

IT Manager

 

T: 480-425-5340  C: 480-529-4653

JasonS@ScottsdaleArts.org 

 

 

Scottsdale Arts, 7380 East Second Street, Scottsdale, Arizona 85251

This message, including files attached to it, may contain confidential information that is intended only for use of the ADDRESSEE(S) named above. If you are not an intended recipient, you are hereby notified that any dissemination or copying of the information contained in this message, or the taking of any action in reliance upon the information, is strictly prohibited. If you have received this message in error, please notify the sender immediately and delete the message from your system. Thank you.

Parents
  • Former Member
    Former Member $organization
    My final solution is configuring my Fortigate firewall under the virtual IP’s.
     
    Each workstation has a static IP address. Each static IP address has 2 identical port translations entries only changing the ISP.
     
    When the primary ISP goes down, the firewall switches to the secondary ISP and the port entry translations stay the same.
     
    I have not had a chance to test it yet.  I decided to put off my EMV implementation until I complete my v14.3.1 upgrade. You have to do the port translation anyway. IT should work about the same on any firewall.
    Too many irons in the fire.
     
    I looked at BGP and like Ross Anderson said.  Rather complex for a small shop.
     
    Jason Song
    Scottsdale Arts
    IT Manager
     
    T: 480-425-5340   C: 480-529-4653
     
Reply
  • Former Member
    Former Member $organization
    My final solution is configuring my Fortigate firewall under the virtual IP’s.
     
    Each workstation has a static IP address. Each static IP address has 2 identical port translations entries only changing the ISP.
     
    When the primary ISP goes down, the firewall switches to the secondary ISP and the port entry translations stay the same.
     
    I have not had a chance to test it yet.  I decided to put off my EMV implementation until I complete my v14.3.1 upgrade. You have to do the port translation anyway. IT should work about the same on any firewall.
    Too many irons in the fire.
     
    I looked at BGP and like Ross Anderson said.  Rather complex for a small shop.
     
    Jason Song
    Scottsdale Arts
    IT Manager
     
    T: 480-425-5340   C: 480-529-4653
     
Children
No Data