[c-nsp] OER + asymmetric routing issues?

[Federico Cossu]

sorry, to be true it's not so classical ;))
yes that's what we are planning, we can avoid using pfr/oer keeping
flows aligned in a simpler/manual way, but having pfr would be nice.
The scenario with 2 fw chassis is well documented, when having only 2
firewall chassis to be configured in an active/active inter-dc
scenario. it is not yet decided, but we'll have 2 clusters each one
into a datacenter where each datacenter will peer with a different
internet isp.




2011/3/7 Nick Hilliard <nick at foobar.org>:
> On 07/03/2011 13:19, Federico Cossu wrote:
>>
>> thank you nick,
>> it's clear to us how to manage ASR on active/active pairs, but what if
>> i have 2 pairs on 2 separated data centers?
>> does the asr group can be extended between separate clusters?
>> any other way to do it?
>
> What exactly are you trying to do here?  Your last email mentioned
> "classical dual-homed scenario", but it looks like you're planning multiple
> firewall clusters over multiple data centres, and potentially multiple
> ingress points into your firewalled network zones, all tied together with
> pfr.  This probably isn't your average simple "dual homed scenario".
>
> Nick
>



-- 
Lo hai detto hermano. No se escherza con Jesus! (Jesus Quintana)