How to configure two CSSes to work as one?

[tony.h]

we have got two css 11150 and wanted to add more servers to the production,

how can we configure them work as one css? Thanks.

[cschneid]

Not exactly sure what you mean by configuring the two CSS's to work as one? Perhaps

you are talking about an Active-Active redundant configuration?? If so, take a look at the

following documents that describe this:

http://www.cisco.com/warp/public/117/vip_appguide.html

http://www.cisco.com/univercd/cc/td/doc/product/webscale/css/css_500/advcfggd/vipredun.htm

[tony.h]

I have a lot servers that need to work at the same time, the ports on the existing css has ran out so we need another css to which more servers can connect. Can more than one css work in a daisy chain? Thanks very much.

[bhose]

Hi,

Your easiest option would be to connect a basic layer 2 switch (Cisco 2950 etc) to one of the CSS ports and connect the additional servers into the switch.

Regards Brett

[tony.h]

But my manager also hope another css to be active redundant. For two css to work in shared backup, a router configured with ECMP is necessary, however the CheckPoint firewall won't be able to provide ECMP capability, I think. Any advice else, thank you very much.

[bhose]

Hi,

If you want to run in the shared VIP redundancy mode then yes you will need several routers (as per the doc below) in the front end network connected between your firewall and the CSS's.

You could run the CSS's in the active/backup VIP redundancy mode. This would allow you to use both CSS's and connect additional servers but would not distribute flow's accross the CSS's.

http://www.cisco.com/warp/public/117/vip_appguide.html

Regards Brett