On Mon, 2009-12-14 at 18:34 +0530, jack daniels wrote: > Hi Guys, > > This is a paticular design issue I'm facing with customer where I have a lot > of constrainits . > > Topology > > > MPLS CLOUD (ISP1) > MPLS CLOUD (ISP2) > | > | > | > | > | > | > CE1 > CE2 > | > | > |--------------------------------PIX525 > (CLUSTER)--------------------------------- > | > | > | > LAN ( 6509 catalyst switch - runnning > HSRP) > > > Issue - I want to go out via ISP1 and come back via ISP1 ......Backup is > CE2 > > When traffic reaches PIX cluster how will it decide whether ISP1 is UP and > traffic is not blackholed......How will PIX cluster decide to FWD traffic to > ISP2. > > Now for this solution , constraints are - > > 1) I cant run HSRP on CE1 and CE2 > 2) Cant run run dynamic routing on PIX > 3) IP SLA also can't also be used on PIX cluster > > Regards
Just checking... is this a second design problem you are presenting or a followup to your earlier post "[c-nsp] Application issue over ISP"? In either case, both are missing critical information required to provide useful feedback... 1 - Any use of NAT? Any failover in place today? 2 - Constraints on far end (can you put any hardware/software there)? 3 - Constraints on application(s) (e.g.independent transactions, maintenance of TCP connection state, failover time allowed, end to end response time, bandwidth constraints, etc.)? 4 - Budget? (Can you throw additional hardware at the problem)? 5 - Timeframe to deployment? (Do you have time to learn all the ways redundancy doesn't work, in particular distinguishing between what "should work" and what "does work")? Also keep in mind that you are posting this to the cisco-nsp mailing list -- a "list for people using cisco in a NSP (Network service provider) environment" (quoted from the sign-up page), yet you are looking for a solution which explicit does not involve your ISPs, the very people who are most likely to read this list. A mailing list or other forum targeted at end users of Cisco, such as those at supportforums.cisco.com might get you quicker, more relevant results. Good luck and have fun! -- Vincent C. Jones Networking Unlimited, Inc. Phone: +1 201 568-7810 [email protected] _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
