Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Design help

Network Design Scenarios 1 and 2.jpg

I have these two design choices in my hand. Scenario 1 was pretty our #1 choice until someone throwed Scenario 2 on the table and now our manager would like to get from me which one should we implement. To me Scenario #1 and #2 are very similar but having the load balancer connected to our internal 5Ks as opposed of having the firewall in front of them, seems bad, but i can come with a good justification to defend on or the other. maybe you guys can help me?

Thanks in advance!


Design help

Hi Alexandre,

Both designs are valid, but what it boils down to is complexity and capital cost. Through use of VLANs you could condense the design further and have the F5 and both firewalls on one-arm connections with inside/outside VLANs being trunked to them. If you wanted more logical separation you could create additional VDCs on your 5K to create administratively separate networks behind each of you firewalls.



Re:Design help

You can't create VDCs on a 5k. Separate VRFs might be the solution.

Sent from Cisco Technical Support Android App

CreatePlease login to create content