Multiple ISP PA5250

[Simon.Cardman]

Hi 

I have been asked to purchase a new PA 5250.

It will potentially have 20GB throughput to the internet.

i am looking at an active active setup, with Aggregate interface inside to each FW.

On the Outside i have been asked to connect to 4 x ISP 5GB Bandwidth on 10GB Bearer to each ISP. (this is for resilience / redundancy)

To share the traffic across the ISP is it Policy Based Forwarding?

So the traffic would need to be coming from 4 different sources to direct to each of the outside Interfaces?

Is there any other way of doing this?

Any help much appreciated.

Simon

[BPry]

@Simon.Cardman,

Is there a reason specifically that you are looking at doing an A/A setup; such as having a lot of asynchronous routing or something like that? Generally you don't actually want to put PA boxes in A/A if you can avoid it. 

Would all 4 x 5GB links be up at all times? You could aggregate your Outside links and then utilize PBF to decide which traffic passes to ISP-1 and which goes to ISP-2. 

It may help to provide a touch more information on what exactly you plan on doing, and maybe sketching out a diagram. It may also be worth engaging your Sales Engineer assigned to your account we can get more details on what you are trying to do and what your actual enviroment looks like. With that information your SE can generate a far better picture of how they would recommend you actually proceed. 

[Simon.Cardman]

@BPry

Thanks for your response, I have asked to design a resilient solution to allow HPC devices to access the internet to upload cutomer data to the cloud.

Hence the reason for Active / Active and multiple links on the inside and the outside.

Yes the 4 x 10GB outside circuits would be utilised but at half B/W.

For resilience they would need to be four seperate ISP's.

On the inside then a QSFP link from each edge switch to each Firewall L3 link, again - resilience.

i wasnt aware Active / Active is not recommended.

Yes i think for this spend i will engage an SE, 

Many Thanks

Simon