Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Load Balacing for FWSM

Hello,

I'm implementing a data center with an Aggregation layer equiped with FWSM-1 which cannot support active/active failover.

I'm thinking about multi-context to manually divide traffic into the two CAT6500.

Any comment or suggestion ?

1 ACCEPTED SOLUTION

Accepted Solutions
Hall of Fame Super Blue

Re: Load Balacing for FWSM

Omar

You did ask for comments after all :-).

You said in your initial post that you could not use active/active but what you describe in terms of failover in your scenario is active/active, see this link -

http://www.cisco.com/en/US/docs/security/fwsm/fwsm40/configuration/guide/fail_f.html#wp1052847

If you choose to go active/standby you cannot have FWSM1 active for one context and standby for another.

Jon

6 REPLIES
Hall of Fame Super Blue

Re: Load Balacing for FWSM

Omar

Not sure i fully understand. If you run active/stanby then multi-context will not allow you to have different FWSM's active and standby. In an active/standby config the active firewall is active for all contexts and the standby is stanby for all contexts.

Only active/active will allow you to use both FWSM's at the same time.

Jon

New Member

Re: Load Balacing for FWSM

And you want to say that we cannot create more than one failover group when using active/standby ?

Hall of Fame Super Blue

Re: Load Balacing for FWSM

Omar

My understanding is that even with active/active both FWSM's are never active for the same context so yes unless you use active/active one FWSM is active for all contexts and one is standby.

Jon

New Member

Re: Load Balacing for FWSM

You can take a look about this please :

http://www.cisco.com/en/US/docs/solutions/Enterprise/Data_Center/ACE_FWSM.html#wp1001980

I think each context is Active on different hardware.

Hall of Fame Super Blue

Re: Load Balacing for FWSM

Omar

You did ask for comments after all :-).

You said in your initial post that you could not use active/active but what you describe in terms of failover in your scenario is active/active, see this link -

http://www.cisco.com/en/US/docs/security/fwsm/fwsm40/configuration/guide/fail_f.html#wp1052847

If you choose to go active/standby you cannot have FWSM1 active for one context and standby for another.

Jon

New Member

Re: Load Balacing for FWSM

Jon,

Thank you for the message :)

Regards,

Omar

199
Views
5
Helpful
6
Replies
CreatePlease to create content