topic Cisco IOS Firewall Cluster in Network Security

Cisco IOS Firewall Cluster

michaelsrpersaud — Mon, 11 Mar 2019 17:37:06 GMT

Hello,

I am new to firewalling with Cisco devices and need a point in the right direction to create a failover cluster between two C2851 (12.24T) configured as a IOS Firewall. Any information, how to's or links would be appreciated.

Thanks

Michael

Re: Cisco IOS Firewall Cluster

Federico Coto Fajardo — Sun, 25 Apr 2010 05:52:40 GMT

Hi,

Not sure if this is what you're looking for, but you can configure Layer 3 redundancy with either HSRP, VRRP or GLBP to have two IOS routers work in conjunction. You can have one active and one standby or doing load-balancing depending on the protocol chosen and the configuration.

So, having two routers with L3 redundancy, allows the internal network (or VLANs) to use both routers to get out to the Internet.

If having IOS Firewall configured, then the routers work together to provide a fall-back mechanism in case of one router failing.

If one of the two router fails, you can have the other router assume the active role and pass all the traffic (most of the times without any interrumption of service for the end users).

There are optional features like tracking interfaces, preemption and adjusting timers to improve convergence.

Is this what you're looking for?

Federico.

Re: Cisco IOS Firewall Cluster

michaelsrpersaud — Sun, 25 Apr 2010 06:57:47 GMT

Thanks Federico.

This was basically what i wanted to know and with your help i found a useful link in Cisco (https://learningnetwork.cisco.com/docs/DOC-1562 ).

Thanks