topic Re: How to configure two CSSes to work as one? in Application Networking

How to configure two CSSes to work as one?

tony.h — Tue, 18 Jun 2002 05:11:34 GMT

we have got two css 11150 and wanted to add more servers to the production,

how can we configure them work as one css? Thanks.

Re: How to configure two CSSes to work as one?

cschneid — Thu, 20 Jun 2002 02:46:19 GMT

Not exactly sure what you mean by configuring the two CSS's to work as one? Perhaps

you are talking about an Active-Active redundant configuration?? If so, take a look at the

following documents that describe this:

http://www.cisco.com/warp/public/117/vip_appguide.html

http://www.cisco.com/univercd/cc/td/doc/product/webscale/css/css_500/advcfggd/vipredun.htm

Re: How to configure two CSSes to work as one?

tony.h — Tue, 25 Jun 2002 03:28:30 GMT

I have a lot servers that need to work at the same time, the ports on the existing css has ran out so we need another css to which more servers can connect. Can more than one css work in a daisy chain? Thanks very much.

Re: How to configure two CSSes to work as one?

bhose — Tue, 25 Jun 2002 04:09:10 GMT

Hi,

Your easiest option would be to connect a basic layer 2 switch (Cisco 2950 etc) to one of the CSS ports and connect the additional servers into the switch.

Regards Brett

Re: How to configure two CSSes to work as one?

tony.h — Tue, 25 Jun 2002 04:17:14 GMT

But my manager also hope another css to be active redundant. For two css to work in shared backup, a router configured with ECMP is necessary, however the CheckPoint firewall won't be able to provide ECMP capability, I think. Any advice else, thank you very much.

Re: How to configure two CSSes to work as one?

bhose — Tue, 25 Jun 2002 05:30:22 GMT

Hi,

If you want to run in the shared VIP redundancy mode then yes you will need several routers (as per the doc below) in the front end network connected between your firewall and the CSS's.

You could run the CSS's in the active/backup VIP redundancy mode. This would allow you to use both CSS's and connect additional servers but would not distribute flow's accross the CSS's.

http://www.cisco.com/warp/public/117/vip_appguide.html

Regards Brett