Nexus 7K and NGFW 2130 Active/Active Firewall configuration
I currently have two 2130 firewalls deployed in an active/standby deployment. I was thinking of some different ways that I could use both of them in an active/active way with some type of automatic failover. I was hoping to find a solution instead of just making it up as I go along.
The firewalls are connected to separate pairs of Nexus 7Ks in two different Data Centers connected by OTV.
My throw together idea is to have the inside IP addresses be different with equal cost static routes, use different NAT IP addresses for the outside and then work on figuring out ways to ensure a complete automatic failover process. For the inside, if one device were to go down, we would automatically start routing to the other firewall due to the static routes. Even though I definitely believe I can get this working, it would be easier to sell to the business if I had a solution.
A couple of constraints are that I am not going to purchase different firewalls, I would like to run NGFW code in the near future (current ASA), and the firewalls will remain connected to the Nexus 7Ks.
I was looking at Nexus Internet Traffic Director, but it seems I would have to put both Firewalls in the same DC. Any way around that?
If there are any available solutions, please let me know.
The cat's out of the bag! In October 2020, Cisco announced the Next Generation of Enterprising Routing Platforms: the Catalyst 8000 Edge Platforms Family including the Catalyst 8200, Catalyst 8300, Catalyst 8500, and Catalyst 8000V. The new family of Cats...
Community Live- Smart Licensing Using Policy (Routing) – A Simplified Licensing Approach
(Live event - Tuesday, 18 May, 2021 at 9:00 am Pacific/ 1:00 pm Eastern / 7:00 pm Paris)
This event will have place on Tuesday 18th, May 2021 at 9:00 hrs PDT&nb...
Welcome to the overview guide that covers the latest in Cisco Networking and Data Center innovations and new product introductions. You'll find information on Intent Based Networking updates, special promotions and free trials, as well as exclusive upcom...
Listen: https://smarturl.it/CCRS8E13 99% of organizations use certifications to make hiring decisions. The reason is simple: Cisco certifications bring valuable, measurable rewards to certified IT professionals and the organizations that employ them....
Cisco AI Endpoint Analytics – Deployment guide
This deployment guide is meant for Cisco AI Endpoint Analytics adoption for customers, partners and everyone focusing on Endpoint Visibility and to how achieve it with Endpoint Analytics. It has sections that...