NSRP Failover to Alternative site

n1koolkat

Newbie

Posts: 2

« on: October 05, 2009, 06:34:11 AM »

We have two main Data centres, the first the production network at DC2 has a connection to the internet via 2 SSG 550 firewalls configured for ha as Active/Standby and the second which was configured as a DR site DC2 which has a connection to the internet via a single SSG 320 firewall. At DC1 in the event that the first firewall fails, the 2nd firewall takes over operations, however in the event that the internet pipe to DC1 fails we want to be able to fail over to the internet pipe at DC2. Is this possible (the gateways to both networks are in the same subnet) and if so can someone point me in the direction of how this can be done

Thanks


« Last Edit: October 05, 2009, 07:02:36 AM by n1koolkat »	Logged

carthman

Jr. Member

Posts: 82

Re: NSRP Failover to Alternative site

« Reply #1 on: November 24, 2009, 12:40:18 PM »

Might be missing the issue here, but couldn't you do weighted statics.

set route 0.0.0.0/0 interface?? gateway x.x.x.1 metric 20
set route 0.0.0.0/0 interface?? gateway x.x.x.2 metric 250

?


	Logged

n1koolkat

Newbie

Posts: 2

Re: NSRP Failover to Alternative site

« Reply #2 on: December 01, 2009, 07:21:42 AM »

Sorry for the late response but i've been on leave. Can the weighting be applied across two sites? (The first location has 2 firewall configured as active passive and the DR site has a single firewall)


	Logged

carthman

Jr. Member

Posts: 82

Re: NSRP Failover to Alternative site

« Reply #3 on: December 01, 2009, 07:30:08 AM »

I would think so.


	Logged

Pages: [1]

JuniperForum.com > Security > NSRP > Topic: NSRP Failover to Alternative site

« previous next »

Latest Knowledgebase Articles

Navigation

Donate

Tools

Recent

Stats

Members

Stats

Users Online