Design help

[asminhaslistas]

I have these two design choices in my hand. Scenario 1 was pretty our #1 choice until someone throwed Scenario 2 on the table and now our manager would like to get from me which one should we implement. To me Scenario #1 and #2 are very similar but having the load balancer connected to our internal 5Ks as opposed of having the firewall in front of them, seems bad, but i can come with a good justification to defend on or the other. maybe you guys can help me?

Thanks in advance!

[Seb Rupik]

Hi Alexandre,

Both designs are valid, but what it boils down to is complexity and capital cost. Through use of VLANs you could condense the design further and have the F5 and both firewalls on one-arm connections with inside/outside VLANs being trunked to them. If you wanted more logical separation you could create additional VDCs on your 5K to create administratively separate networks behind each of you firewalls.

cheers,

Seb.

[Andras Dosztal]

You can't create VDCs on a 5k. Separate VRFs might be the solution.


Sent from Cisco Technical Support Android App