02-12-2018 08:08 AM
Hi
I have been asked to purchase a new PA 5250.
It will potentially have 20GB throughput to the internet.
i am looking at an active active setup, with Aggregate interface inside to each FW.
On the Outside i have been asked to connect to 4 x ISP 5GB Bandwidth on 10GB Bearer to each ISP. (this is for resilience / redundancy)
To share the traffic across the ISP is it Policy Based Forwarding?
So the traffic would need to be coming from 4 different sources to direct to each of the outside Interfaces?
Is there any other way of doing this?
Any help much appreciated.
Simon
02-12-2018 08:16 AM
Is there a reason specifically that you are looking at doing an A/A setup; such as having a lot of asynchronous routing or something like that? Generally you don't actually want to put PA boxes in A/A if you can avoid it.
Would all 4 x 5GB links be up at all times? You could aggregate your Outside links and then utilize PBF to decide which traffic passes to ISP-1 and which goes to ISP-2.
It may help to provide a touch more information on what exactly you plan on doing, and maybe sketching out a diagram. It may also be worth engaging your Sales Engineer assigned to your account we can get more details on what you are trying to do and what your actual enviroment looks like. With that information your SE can generate a far better picture of how they would recommend you actually proceed.
02-12-2018 09:22 AM
Thanks for your response, I have asked to design a resilient solution to allow HPC devices to access the internet to upload cutomer data to the cloud.
Hence the reason for Active / Active and multiple links on the inside and the outside.
Yes the 4 x 10GB outside circuits would be utilised but at half B/W.
For resilience they would need to be four seperate ISP's.
On the inside then a QSFP link from each edge switch to each Firewall L3 link, again - resilience.
i wasnt aware Active / Active is not recommended.
Yes i think for this spend i will engage an SE,
Many Thanks
Simon
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
