Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 4121
  • Last Modified:

Failover

I am planing to redesign our current DC network and expected to have Network Failover (HA)(Active/Standby). So i budgeted to buy 2 x ASA5510 and 2  x GE Switches. Attached is my Plan in mind. can some body verify, whether need to amend anything in my approach?
1. Firewall to Firewall connection required
2. What action required to take if Primary Firewall or switch fails.
3. Witch is the right approach of keeping Servers in each VLAN (WEB, APPlications & DB)
Network-Diagram.jpg
0
jacobsumod
Asked:
jacobsumod
  • 2
  • 2
2 Solutions
 
mikebernhardtCommented:
Here are the weaknesses I see:
1. All of your LAN connectivity is through the first switch and all servers are single-homed to it. You should dual-home all servers to both switches.

The best way to do this is with NIC teaming software set up in active/standby mode so the 2 NICs share one IP address and on MAC address. All VLANs must be configured on both switches and ASAs. The cross-connect between the switches must be a trunk that carries all the VLANs. Run HSRP on all VLANs on the ASAs and use Standby Tracking so that if the primary circuit goes down, the LAN HSRP swings over to the backup circuit.

2. I don't know how the circuits on the outside connect or where they go so I can't comment on WAN failover.

I've attached a revised diagram to help illustrate item 1.
Drawing1.jpg
0
 
Syed Mutahir AliTechnology ConsultantCommented:
Mike's diagram is solid and for the wan failover :
You can use a dual wan router and connect your firewalls to it so that if one of your wan connections go down it will automatically failover to your 2nd wan conneciton (if you have two wan feeds at the moment)
What we use is a draytek 2950 dual wan router with gigabit ports and it is very stable and robust ;
you can check with your local or authorized draytek reseller in your region
http://draytek.co.uk/products/vigor2950.html
www.draytek.com
hope this helps
0
 
mikebernhardtCommented:
Wow. I made my comment a year ago. Maybe this question should be closed out!
0
 
Syed Mutahir AliTechnology ConsultantCommented:
oh, I didn't realized the date until now ; Thanks Mike for pointing it out
yes the question should be closed
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now