Layer 2 connection and switch security

[sudipbhattarai9828]

I just want to create a simple DR site.

How can I maintain security with the layer 2 switches? 

Is layer 2 connection sufficient or do I need to add a router or firewall or IPSEC VPN? 

[balaji.bandi]

Depends on requirement - is this only Layer 2 Extension between DC ? what is the end device connection ?

if they are latest Switches - You can do MACSEC between Layer 2 switches.

This is based on the information you have provided here.

[sudipbhattarai9828]

I have a router, firewall, endpoint security (Bitdefender), and switches configured on the DC site.
I have purchased NAKIVO software for backup. 

I have created 3 servers on the DC end via VMware and all these servers' data should get back up on the DR server. ( This has been already tested on the DC site, backups are successfully made) 

Can the firewall of the DC site help to reduce the threat on the DR site?
Literally, I want to reduce the cost of my company?

What are the chances of losing the data via outside threats? Can there be any danger from the ISP side? There is only a password security mechanism on the server. 
Do I literally need to purchase any router or any firewall devices to ensure no harm on the DR site? 

[balaji.bandi · Accepted solution]

DR Design is big task, unlike we think just like any switch connection.

You need to define what is DR in your terms, what services need to fail over ? is this exiting system support ?

Refer DR for reference :

https://www.cisco.com/c/dam/global/sr_rs/assets/expo2009/docs/BC_and_DR.pdf

We need to consider Cost saving vs availability (this is more to do with Business decision).