[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Meshing firewalls

On Fri, 9 May 2003 04:31 pm, Jonathan Oxer wrote:
> So, the reason for posting: has anyone here done anything like this, or
> have alternative ideas about how it could be set up? Does my plan make
> sense? Is there a way to set this up without requiring 6 ethernet cards
> per firewall?
> Did I make an enormous blunder and should now retreat back under a rock?

First thought : your upstream routers, are they to seperate providers? The way 
we have ours setup is to have one provider as the primary, and a backup 
provider that essentially sees no traffic unless provider 1 falls over - and 
so we save a bit of money on bandwidth by having the plans set up 
appropriately. Now, if you have a similar setup, then you may have issues if 
Border router 1 dies and you need to rely on Provider 2 for all your 

Second thought : You could probably combine those three internal switches into 
one by using a smart switch with VLAN support. This would also mean you can 
set up a second switch as a failover at that point too, and eliminate the 
need for so many ethernet points on the firewalls.

Third thought : There are multi-port enthernet cards avalable, we're presently 
trialing a 4-port card for a similar setup in our firewall. Google keywords : 
"adaptec starfire", although I'm sure there are others out there.

GPG : http://n12turbo.com/tarragon/public.key

Reply to: