topic Re: Deploying VM-series from AWS Market place in General Topics

Deploying VM-series from AWS Market place

pink-panther — Fri, 06 Aug 2021 09:06:12 GMT

I was wondering what typical diagram would look like for this deployment (youtube video of same name). If anybody has a network diagram for a setup/deployment I'd be grateful for it.

Re: Deploying VM-series from AWS Market place

SebRupik — Fri, 06 Aug 2021 12:30:44 GMT

Hi there,

The topology is pretty simple, a mgmt0 interface (sn-mgmt), Eth1/1 (untrust) (sn-pub) and Eth1/2 (trust) (sn-priv).

The firewall is positioned between the two AWS routing tables which hold the subnets sn-pub and sn-priv. Traffic must pass through the vPA to route between the AWS route tables.

Oddly the sn-mgmt subnet is also in the same routing table as sn-pub (on the 'outside') which strikes me as a bad topology....but probably easier to manage for the benefit of the tutorial!

cheers,

Seb.

Re: Deploying VM-series from AWS Market place

pink-panther — Sun, 08 Aug 2021 22:15:54 GMT

Hi would you happen to have a picture/diagram ?

Re: Deploying VM-series from AWS Market place

SebRupik — Mon, 09 Aug 2021 13:05:20 GMT

Something like this:

cheers,

Seb.

Re: Deploying VM-series from AWS Market place

LAYER_8 — Mon, 09 Aug 2021 18:30:12 GMT

Check out our consulting engineering org's github repo. They built terraform templates of all the common deployments from our reference architecture guide. For example, here's an HA pair attached to a transit gateway peering with 4 other VPCs.

You may be able to find the traditional 3 nic (1 mgt, 1 trust, 1 untrust) deployment model picture in a different directory.

Re: Deploying VM-series from AWS Market place

pink-panther — Mon, 09 Aug 2021 19:23:18 GMT

Thanks Seb.