2013年8月14日星期三

Simple network architecture for redundant switches and firewalls?

Question:

We'll be building Cisco 3945 price a small remote site that will use two Windows 2008 servers.  We would like redundancy in firewalls, IPS's and switches.   Is it better to buy stand-alone ASA 5510s (with embedded IPS's) and 2960s, or is it a better option to buy a  Cat 6000 with FW modules.  We'll have several internet IP addresses available.  I don't know much about Nexus or latest HW options, so perhaps there's options I don't know about.  Thanks

Answer:

The Cat6500 with ASA-SM is far more expensive then standallone devices. If you think about the 5510 and the throughput is enough, then I would use the following equipment:

2* ASA 5515-X-IPS as Active/Standby
2* Cat 3750-X as a stack with redundant power-supplies.

That will give you a maximum of redundancy for an affordable price.


-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:


没有评论:

发表评论