Well, it's not an easy question, and some answers might come from your internal policies (ie. fail open or fail closed).

Personnally, I would go with two standalone environments. I guess switching offices are not that frequent, is it?

But, using 802.1X (and if you have Cisco), there are some mechanism to fail open if the AAA server is not responding for XYZ reason. You can allow phone through, and send users on a temporary guests VLAN. I remember some folks doing that. That would mitigate the WAN issue.

Hope it helps.

On 2013-02-28 6:59 AM, Jan Behrend wrote:
Hello list,

we are running VLAN enforced PF throughout our institute and are very
happy with it!
The perspective is now, that we want to span the system over a dedicated
fiber to our branch office, the telescope site "Effelsberg".

I am wondering what's the best way to implement:

1) Have two independent PF setups on both sites?
This implicates that a mac address/person registered on one site is not
on the other. So conformity scans start all over and many mac addresses
have to registered twice ...

2) Have a routed PF setup as shown in the beginning of the admin guide?
This would render the telescope site without a PF instance if someone
decides to take a ditch witch to dedicated line ...

How can I setup redundancy in such a setup?

Thanks for all your help!
Cheers Jan



------------------------------------------------------------------------------
Everyone hates slow websites. So do we.
Make your web apps faster with AppDynamics
Download AppDynamics Lite for free today:
http://p.sf.net/sfu/appdyn_d2d_feb


_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users


--
Francois Gaudreault
Architecte de Solution Cloud | Cloud Solutions Architect
[email protected]
514-629-6775
- - -
CloudOps
420 rue Guy
Montréal QC  H3J 1S6
www.cloudops.com
@CloudOps_

------------------------------------------------------------------------------
Everyone hates slow websites. So do we.
Make your web apps faster with AppDynamics
Download AppDynamics Lite for free today:
http://p.sf.net/sfu/appdyn_d2d_feb
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to