Cisco Recommended way to deploy Active/Standby PAN/MnT in multiple DCs

[danhamil]

Hi,

What is the Cisco recommended way to deploy PAN and MnT in a distributed, multi-site environment using 5 appliances

Here are the 2 options.

Option 1: Active PAN and Active MnT on different appliances in different datacenters

• DC1
  • 1. PAN-Active / MnT-Standby
  • 2. PSN
• DC2
  • 3. PAN-Standby / MnT-Active
  • 4. PSN
• DC3
  • 5. PSN

Option 2: Active PAN and active MnT on the same appliance in one datacenter

• DC1
  • 1. PAN-Active / MnT-Active
  • 2. PSN
• DC2
  • 3. PAN-Standby / MnT-Standby
  • 4. PSN
• DC3
  • 5. PSN

i.e. is the recommendation to have the active PAN and MnT on same box in same DC or is it better (or ok) to have Active PAN and Active MnT split across separate DCs in a distributed deployment?

Thanks 

[anthonylofreso]

Our setup is as follows:

DC1	DC2
PAN1 - PRI(A), PRI(M)	PAN2 - SEC(A), SEC(M)
PSN 1 & 2	PSN 3 & 4

We have flipped a couple times on primary / secondary for admin / monitoring. Seems different TAC engineers have different opinions on how this should be configured. Good question, curious what the Cisco folks on here will say.

[paul · Accepted solution]

Unless something has change, for best performance of live logs and reporting the Primary Admin/M&T should be running on the same box.  I don't split my primary roles between DCs on any of my setups.

[Cory Peterson]

I Agree with Paul, I used to split them across DCs thinking that the load would be better split. This is not really the case and the performance seems better when they are on the same box.