6500 Switches and Modules

[kai.nicholls]

Hi,

I want to implement two 6513 catalysts running side by side in a secure environment.

I want to use the new Supervisor 720 and have two in each chassis.

In addition i want to use the firewall module and IDS.

Is it possible to put two firewall modules in each chassis and have them running similar to a HA Pair in traditional firewalls.

Or can i only have one firewall module in each chassis and have one as ACTIVE, the other as STANDBY.

Please can anyone assist.

[tbaranski]

Looks like you can put them in HA per http://www.cisco.com/en/US/products/hw/switches/ps708/products_data_sheet09186a00801daa53.html:

"The FWSM can be deployed in pairs to provide intra- or interchassis stateful failover services that ensure resilient network protection for the most critical environments. Modules configured in failover mode continuously synchronize their connection state and device configuration data, and in the event of failure, modules failover with absolute transparency to users."