About yham81

Hello Everyone, We are planning to setup VM-Series in host mode for East-West protection in NSX-T. Part of integration between NSX-T and Panorama, we need a user/service account on NSX-T that Panorama will use for integration and synchronization. My question is what roles/permission/privileges that user/service account need? does it have to be admin/super user? Could you please share some authentic source that provides this detail?   Thanks in advance ... View more

Hello Everyone, I'm designing an edge network with Active/Active HA. After reading the PA documentation, I found Active/Active Routed based redundancy design which seems best suited for our environment. However the topology shown in Docs is a square model and I'm thinking to add more links to convert it to full mesh to add more redundancy and fast convergence  I wanted to ask what are the pros and cons of full mesh design.    Pros of Full mesh ( i can think of): 1) ECMP  2) Fast switchover in case of link failure 3) Tolerate double link failure Cons of Full mesh: 1) Complexity 2) more physical interfaces 3) Asymetric traffic may cause issue such as traffic leave eth 1/2 but comes back from eth1/4 of the firewalls (assuming eth1/2 & eth1/2 in the same security Zone) and to allow that behavior, I will have to tweak the firewall configuration. Please see below both square design and the full mesh design that I intend to proceed with. I will appreciate the feedback. Thanks   HA-AA-Routed-based-Redundancy-Square   HA-AA-Routed-based-Redundancy-Full-Mesh ... View more