?
Solved

dual PIX 515e / Catalyst 3750 / Dell server - high availability

Posted on 2006-10-31
6
Medium Priority
?
521 Views
Last Modified: 2013-11-16
Hi everyone,
I need to setup a small network with high availability in mind.

We have following network equipment:
- two Cisco PIX 515e firewalls
- two Cisco Catalyst 3750 switches
- two Dell servers with two NICs each (Intel/Netgear but can work in a team using Intel ANS)

What is the best way to configure this network?

Is it possible to configure it so that system can still work if eg. following components fail: NIC1, switch1 and pix2?

Thanks
0
Comment
Question by:milan_novkovic
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
6 Comments
 
LVL 27

Accepted Solution

by:
pseudocyber earned 2000 total points
ID: 17841190
Pix                      Pix
 |                        |
---VRRP or GLBP---
 |                        |
 |                        |
3750=======3750
 | \                  /  |
 |  \                /   |
 |    \             /    |
 |      \         /      |
 |        \     /        |
 |          \  /         |
 |          / \          |
 |         /    \        |
 |       /        \      |
 |     /            \    |
 |   /                \  |
 | /                    \|
Dell                    Dell
Teamed             Teamed

If you're using multiple vlans, then trunk your vlan across on both switches.  Make two connections between switches and aggregate them (Fast Etherchannel) for redundant load balancing connections.

VRRP or GLBP will provide firewall redundancy in case one fails.  GLBP is active/active.

Team the NICs on your Dells.  Then, connect one cable from each switch to the Dells.  Aggregate the two connections if you can on the switch side and if so, then use Switch Assisted Load Balancing (SLB) (naming changes).  If you can't aggregate the two connections (bond, or Etherchannel) then use Fault Tolerant Load Balancing (FTLB) on the Server Teaming end.

HTH
0
 

Author Comment

by:milan_novkovic
ID: 17843341
I forgot to mention that PIXes have active/standby licences, so standby would work only when active fails.

We received Stackwise cable with 3750 switches. Is there a need to use switch stacks for our needs or should switches be connected using only ethernet cables?
0
 
LVL 27

Expert Comment

by:pseudocyber
ID: 17843359
I would use the stacking cables.  Faster, and don't burn Ethernet ports.
0
When ransomware hits your clients, what do you do?

MSPs: Endpoint security isn’t enough to prevent ransomware.
As the impact and severity of crypto ransomware attacks has grown, Webroot fought back, not just by building a next-gen endpoint solution capable of preventing ransomware attacks but also by being a thought leader.

 

Author Comment

by:milan_novkovic
ID: 17849961
Is there a way of configuring this network so that system would work if eg. PIX1 and Switch2 fail (PIX1 is connected to Switch1) ?
0
 
LVL 27

Expert Comment

by:pseudocyber
ID: 17850112
Not without connecting both pixes to both 3750's.
0
 

Author Comment

by:milan_novkovic
ID: 17857814
How can I connect both pixes to both catalysts? I think it's not possible to use the same subnet for two different interfaces on PIX 515e.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article is a collection of issues that people face from time to time and possible solutions to those issues. I hope you enjoy reading it.
Powerful tools can do wonders, but only in the right hands.  Nowhere is this more obvious than with the cloud.
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…
Suggested Courses

719 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question