Deployment of Data Center

[naeemqamar123]

I am going to deployed new data center and topology attached  for your reference .Please suggest the best design and related configuration. 

[Ajay Saini]

Hello,

We have similar setup in our datacenter, just one more thing. We have a VPC configured between the Core Switch and the firewall. It will mean that any frames landing on the secondary core switch will travel to upstream ASA directly without having to go through the other core switch. 

Ofcourse it depends on the number of free interfaces on the ASA and Core Switch to be configured for this purpose.

Reference Document:

https://www.cisco.com/c/dam/en/us/td/docs/switches/datacenter/sw/design/vpc_design/vpc_best_practices_design_guide.pdf

HTH

[balaji.bandi]

Is the ASA(or FTD ) Active / Active or Active / Standby ? is the ASA multi-context mode.( as per the document you only looking for simple route FW, just checking).

if you can able to build vPC between ASA and Core side, you have more resilience setup.

Less failure scenarios, since this is DC, you would expect to have all9 SLA.