Collapsed core/aggregation VSS

[Ibrahim Jamil]

Hi Netpro

if ur servers are directly connected to the Collapsed core/aggregation VSS, is it hard to insert IPS and run it in inline mode or add ACE Appliance?

unfortunately we don't have server farm switch

Please can y clarify

thanks

[rsimoni]

Hi Ibrahim,

you can still do that.

If you had 1 IPS (or ACE) only it is not a big issue; if you add a pair of them you need to make sure that they are in active/standby mode.

what issue are you exactly encountering?

Riccardo

[Ibrahim Jamil]

I heard if u dont have server farm switch it is not possible to provision IPS or FW ,is that true

Thanks

[ralphcarter]

You can get creative and setup some transient VLANs to make it work. I do it all the time.

Interfaces on the IPS would belong to different VLANs connecting same switch, etc.

[rsimoni]

exactly, usually you have the IPS bridge 2 vlans to get it in the traffic path

[Ibrahim Jamil]

Guys

can some one post a similar setup,where servers are directly connected to a collapsed CORE, while the IPS needs to be added inline mode