[c-nsp] Design issue for customer with dual MPLS links

[Vincent C Jones]

On Mon, 2009-12-14 at 18:34 +0530, jack daniels wrote:
> Hi Guys,
> 
> This is a paticular design issue I'm facing with customer where I have a lot
> of constrainits .
> 
> Topology
> 
> 
> MPLS CLOUD (ISP1)
> MPLS CLOUD (ISP2)
> |
> |
> |
> |
> |
> |
> CE1
> CE2
> |
>                     |
> |--------------------------------PIX525
> (CLUSTER)---------------------------------
>                                     |
>                                     |
>                                     |
>                                   LAN ( 6509 catalyst switch - runnning
> HSRP)
> 
> 
> Issue - I want  to go out via ISP1 and come back via ISP1 ......Backup is
> CE2
> 
> When traffic reaches PIX cluster how will it decide whether ISP1 is UP and
> traffic is not blackholed......How will PIX cluster decide to FWD traffic to
> ISP2.
> 
> Now for this solution , constraints are -
> 
> 1) I cant run HSRP on CE1 and CE2
> 2) Cant run run dynamic routing on PIX
> 3) IP SLA also can't also be used on PIX cluster
> 
> Regards

Just checking... is this a second design problem you are presenting or a
followup to your earlier post "[c-nsp] Application issue over ISP"? In
either case, both are missing critical information required to provide
useful feedback...

1 - Any use of NAT? Any failover in place today?
2 - Constraints on far end (can you put any hardware/software there)?
3 - Constraints on application(s) (e.g.independent transactions,
maintenance of TCP connection state, failover time allowed, end to end
response time, bandwidth constraints, etc.)?
4 - Budget? (Can you throw additional hardware at the problem)?
5 - Timeframe to deployment? (Do you have time to learn all the ways
redundancy doesn't work, in particular distinguishing between what
"should work" and what "does work")?

Also keep in mind that you are posting this to the cisco-nsp mailing
list -- a "list for people using cisco in a NSP (Network service
provider) environment" (quoted from the sign-up page), yet you are
looking for a solution which explicit does not involve your ISPs, the
very people who are most likely to read this list. A mailing list or
other forum targeted at end users of Cisco, such as those at
supportforums.cisco.com might get you quicker, more relevant results. 

Good luck and have fun!

-- 
Vincent C. Jones
Networking Unlimited, Inc.
Phone: +1 201 568-7810
V.Jones at NetworkingUnlimited.com