dual PIX 515e / Catalyst 3750 / Dell server - high availability

Posted on 2006-10-31
Medium Priority
Last Modified: 2013-11-16
Hi everyone,
I need to setup a small network with high availability in mind.

We have following network equipment:
- two Cisco PIX 515e firewalls
- two Cisco Catalyst 3750 switches
- two Dell servers with two NICs each (Intel/Netgear but can work in a team using Intel ANS)

What is the best way to configure this network?

Is it possible to configure it so that system can still work if eg. following components fail: NIC1, switch1 and pix2?

Question by:milan_novkovic
  • 3
  • 3
LVL 27

Accepted Solution

pseudocyber earned 2000 total points
ID: 17841190
Pix                      Pix
 |                        |
---VRRP or GLBP---
 |                        |
 |                        |
 | \                  /  |
 |  \                /   |
 |    \             /    |
 |      \         /      |
 |        \     /        |
 |          \  /         |
 |          / \          |
 |         /    \        |
 |       /        \      |
 |     /            \    |
 |   /                \  |
 | /                    \|
Dell                    Dell
Teamed             Teamed

If you're using multiple vlans, then trunk your vlan across on both switches.  Make two connections between switches and aggregate them (Fast Etherchannel) for redundant load balancing connections.

VRRP or GLBP will provide firewall redundancy in case one fails.  GLBP is active/active.

Team the NICs on your Dells.  Then, connect one cable from each switch to the Dells.  Aggregate the two connections if you can on the switch side and if so, then use Switch Assisted Load Balancing (SLB) (naming changes).  If you can't aggregate the two connections (bond, or Etherchannel) then use Fault Tolerant Load Balancing (FTLB) on the Server Teaming end.


Author Comment

ID: 17843341
I forgot to mention that PIXes have active/standby licences, so standby would work only when active fails.

We received Stackwise cable with 3750 switches. Is there a need to use switch stacks for our needs or should switches be connected using only ethernet cables?
LVL 27

Expert Comment

ID: 17843359
I would use the stacking cables.  Faster, and don't burn Ethernet ports.
Become an IT Security Management Expert

In today’s fast-paced, digitally transformed world of business, the need to protect network data and ensure cloud privacy has never been greater. With a B.S. in Network Operations and Security, you can get the credentials it takes to become an IT security management expert.


Author Comment

ID: 17849961
Is there a way of configuring this network so that system would work if eg. PIX1 and Switch2 fail (PIX1 is connected to Switch1) ?
LVL 27

Expert Comment

ID: 17850112
Not without connecting both pixes to both 3750's.

Author Comment

ID: 17857814
How can I connect both pixes to both catalysts? I think it's not possible to use the same subnet for two different interfaces on PIX 515e.

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Considering cloud tradeoffs and determining the right mix for your organization.
OnPage has always empowered IT teams but also amplify alerting capabilities. In the following slides you will see 5 features of OnPage that act as important tools for any IT team to resolve incidents faster
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…
NetCrunch network monitor is a highly extensive platform for network monitoring and alert generation. In this video you'll see a live demo of NetCrunch with most notable features explained in a walk-through manner. You'll also get to know the philos…

621 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question