Network Topology Configuration validation

Unanswered Question
May 2nd, 2006
User Badges:

We are implementing a Two-tier firewall architecture using Fortigate and cisco ASA-5500 series firewall for our internal network.

All the tiers will be redundant mode firewall (Active/Active)

First tier firewall (Fortigate) will host the WEB servers (Front end servers)

Second tier firewall (ASA-5520) will host the database (Back end servers) storage servers

Pls refer the attached security-setup-final PPT for actual topology.

Kindly Guide on the configuration in terms of :-

1) Routing protocol to be used (OSPF/RIP)

2) PRI dialup config (DDR) design for branches

3) Firewall design validation

4) IP Scheme validation (Attached)

5) Wan setup termination point

Pls suggest if the proposed setup and related IP scheme will work seamlessly

Also if OSPF is used

How many OSPF areas should be created.

For Primary and DR site.

Should both the site be configured in area 0 or different area.

Also should we use single subnet for dialup (ISDN-BRI) for backup or should we use point to point subnet for each dialup location.

Should loopback address be used for each router.

Primary link will be channelized E1.


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)


This Discussion