NEW DC network design with appropriate L3 switch model

[Nehpal Rathore]

We have a new network setup as the attached diagram, and we want to use Cisco firewall and Cisco switch in this design,

Please can you suggest the recommended and best L3 switch and Cisco Firewall with required configuration on L3 switch to be done to use for this design?

Any amendment if required or if any other suggestion is also most welcome.

[M02@rt37]

Hello @Nehpal Rathore,

Using Cisco Nexus switches with Virtual Port Channels (vPC) could be a viable option. Nexus switches are typically deployed in data center environments and provide advanced features for scalability, high availability, and data center interconnectivity. With vPC, you can create a virtual link aggregation group (LAG) that allows for active-active connections to devices, providing redundancy and load balancing.

https://www.cisco.com/site/us/en/products/networking/cloud-networking-switches/index.html

As concerned your Cisco Firewall you have Cisco Firepower series:

https://www.cisco.com/site/us/en/products/security/firewalls/firepower-2100-series/index.html

Considering the role you want to give to your firewall, Cisco Firepower should be overkill.

[Nehpal Rathore]

Hi,

Thanks for ack my request.

1. In this we have requirement that our office users will access these DC server through internet i.e. SSL VPN, so is it possible in Cisco nexus environment with Cisco firewall.

2. We are going to have multiple IPSEC tunnel connect to our customer through that we monitor customer devices from our monitoring server that is most important service we providing to our customer rest all server are security server, syslog server etc.

[Kasun Bandara]

Hi @Nehpal Rathore Actually, this needs more requirement gathering before give suggestion with exact model. but i can suggest that, you can use Cisco nexus series for Switching (this is mainly designed for datacenter requirements) and Cisco FTD firewall series to firewall requirement. for the diagram you shared, consider 3 things.

1. Access later for Datacenter

2. Core layer for Datacenter and Campus

3. Firewall 

[Nehpal Rathore]

Hi,

1. In this we have requirement that our office users will access these DC server through internet i.e. SSL VPN, so is it possible in Cisco nexus environment with Cisco firewall.

2. We are going to have multiple IPSEC tunnel connect to our customer through that we monitor customer devices from our monitoring server that is most important service we providing to our customer rest all server are security server, syslog server etc.

3. Our office location is located at different location we will just setup this DC at rented place.