This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Active/Passive HA between sites

I'm planning a HA deployment for a customer. On the main site (MS) will be 2 x SG 450 in Active/Passive HA and Network Protection (it will be used mainly for protecting servers in a datacenter). The disaster recovery site (DRS) will be connected to MS with a RED 50 trough DRS WAN1 (the connection will be used for server replica, backup, etc).

My question is, if I install a 3rd SG 450 on the DRS and I will have a WAN2, is there a way to make a HA link/connection to MS?

thanks,
Istvan

This thread was automatically locked due to age.

0 BrucekConvergent over 10 years ago

I don't believe so. HA operations require low latency and high bandwidth connections, wire-speed connections.

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Cancel
0 mod2402 over 10 years ago

Hi Istvan,

you can't configure HA in two different subnets. The config is central.

regards
mod
Cancel
Vote Up 0 Vote Down

Cancel
0 BrucekConvergent over 10 years ago in reply to mod2402

Hi Istvan,

you can't configure HA in two different subnets. The config is central.

regards
mod

This too -- [:)]

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 10 years ago

I wonder. I would think that you might be able to do this with BGP for the WAN connections and a direct connection for eth3 that's at least 50Mbps. In fact, I think the sync conversation is strictly TCP, so I wonder if even a VPN with adequate speed might work, or a RED tunnel if there's some layer-2 stuff happening.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 10 years ago

I've seen it done with a point-to-point MPLS, but it's an expensive proposition.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 10 years ago

... it's an expensive proposition.

[;)] That's what I was thinking. My wife works for a company that has Riverbed and a dedicated 1Gbps line between Tulsa and their DR site in Philadelphia. I don't think I'll ever get a shot at that account though!

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 issshvan over 10 years ago

thank you guys for clarifications
Cancel
Vote Up 0 Vote Down

Cancel

Active/Passive HA between sites

Submitted a Tech Support Case lately from the Support Portal?