CSS 11000 series with load balancing for high availablity servers

[mthangav]

Hi,

We have arrived at a designed,which has 2 PIX firewall(525)in a fault tolerant mode.Two interfaces from each of the PIX is connected directly to two css1000 switch which works in a fault tolerant mode.

other Two interface from each of the two css11000 switch is connected directly to two catalys 4003 switches to which we have Servers attached.

Pls let me know whether this design will work or If you could suggest some other design for high availablity servers which are kept at the DMZ.

Pls note in our design the internet user first hit the frewall and then the CSS11000 and then catalys 4003 and finally the Servers.

If anyone can help me out,pls send me a mail at thangavel.mudaliar@wipro.com

[b59048]

Are the PIXes to be setup in a failover bundle?

If you use two interfaces in each PIX to connect

to the two CSS systems, are you not complicating the

setup? Which of the two should be called the inside?

I cannot recall whether you can have two inside legs at the current PIX level.