07-16-2009 06:52 AM - edited 03-04-2019 05:27 AM
We have 2 FTP servers each in there own DMZ on two different physical sites, we want to be able to advertise 1 IP/FQDN to the internet. The two sites are connected by iBGP.
We could either cluster the firewalls so that we nat the DMZ FTP server address to one public address or we could use load balancers (which seems a slight overkill)
Does anyone have any other suggestions on how we would achive this
Many Thanks
07-22-2009 05:33 AM
To use load balancing, configure the following elements for each device that participates in the cluster.
⢠Public and private interfaces
⢠VPN load-balancing cluster attributes
http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/vpnsysop.html#wp1048959
08-25-2009 02:23 AM
Thanks for your comments but (dare I say it) we are using checkpoint firewall, so I was hoping to do it on the public facing routers?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide