cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Bookmark
|
Subscribe
|
1544
Views
1
Helpful
5
Replies

Replacing edge with a pair of Cisco 8300 edge platforms

Terence_721
Level 1
Level 1

I'm replacing an old edge device with two Cisco 8300 routers; Dual ISP setup. The 8300 routers were also ordered with 4 port LAN modules.  I'm putting together the config before the routers have arrived and want to figure out the down stream config.  Basically, I have HA firewalls(active/passive) sitting down stream from the routers.  The

default route

from the active firewall is to the current edge device IP address.  I want to keep the firewall routing the same. 

Can you configure HSRP on the pair of 8300 routers using the lan module interfaces.  I'm thinking it would need layer 2 connection between the two routers and SVIs configuration on both routers. It looks like it should be possible but I'm looking to see if this has been done before.  I've attached a picture to help explain the design.

1 Accepted Solution

Accepted Solutions

Hsrp need l2'

and I see you interconnect both edge router so only make this interconnect as l2 not l3.

Use

svi for ibgp

between two router 

Use svi for hsrp 
Use vip of hsrp as next hop of default route in fw 

View solution in original post

5 Replies 5

Hsrp need l2'

and I see you interconnect both edge router so only make this interconnect as l2 not l3.

Use

svi for ibgp

between two router 

Use svi for hsrp 
Use vip of hsrp as next hop of default route in fw 

Ok, it sounds like it is a valid design, thanks for confirming.  Yes, I was planning on using the LAN module interfaces to interconnect to the two routers for the L2 connection.

I'll have to look at the deployment model in that document.  It may be something to consider. Thanks.

I scanned through the Cisco doc on interchassis high availability.  It appears the deployment model has one active and one standby router.  I need both routers actively routing traffic for this project, so I don't think HA will work for me.  It maybe something to consider for other deployments I may have in the future though.