sorry, to be true it's not so classical ;)) yes that's what we are planning, we can avoid using pfr/oer keeping flows aligned in a simpler/manual way, but having pfr would be nice. The scenario with 2 fw chassis is well documented, when having only 2 firewall chassis to be configured in an active/active inter-dc scenario. it is not yet decided, but we'll have 2 clusters each one into a datacenter where each datacenter will peer with a different internet isp.
2011/3/7 Nick Hilliard <[email protected]>: > On 07/03/2011 13:19, Federico Cossu wrote: >> >> thank you nick, >> it's clear to us how to manage ASR on active/active pairs, but what if >> i have 2 pairs on 2 separated data centers? >> does the asr group can be extended between separate clusters? >> any other way to do it? > > What exactly are you trying to do here? Your last email mentioned > "classical dual-homed scenario", but it looks like you're planning multiple > firewall clusters over multiple data centres, and potentially multiple > ingress points into your firewalled network zones, all tied together with > pfr. This probably isn't your average simple "dual homed scenario". > > Nick > -- Lo hai detto hermano. No se escherza con Jesus! (Jesus Quintana) _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
