topic VOSS redundancy design query in ExtremeSwitching (VSP/Fabric Engine)

VOSS redundancy design query

gaurav-pandya — Tue, 29 Aug 2023 10:30:53 GMT

Hello All,

We have already extreme switches 5520 VOSS platform running in vIST mode and connected to firewall (with LACP) on LAN side.

We want to achieve redundancy on DMZ and WAN side as well. I am attaching diagram for reference. We are planning to purchase 5520/5420 for DMZ environment and want to achieve redundancy. I have question regarding design.

1. Should I configure vIST and LACP configuration on DMZ environment? OR

2. I should configure simple LACP and mlt configuration on DMZ switches?

Which option would be the best one?

Re: VOSS redundancy design query

WillyHe — Wed, 30 Aug 2023 08:39:30 GMT

Hello,

You should do the same on both sides of the FireWalls for the fastest failover.

You cannot make an LACP connection from a device (e.g. a FireWall, server system, ...) to a NON vIST setup, then the LACP would never form a trunk group..
It must be in a vIST setup.

regards
WillyHe

Re: VOSS redundancy design query

gaurav-pandya — Wed, 30 Aug 2023 10:52:41 GMT

Hi,

We are already using LACP MLT config on 5520 connected to firewalls with LACP on LAN side. It is working with no issue.

My question here is should I use vIST or simple LACP design for DMZ.

Re: VOSS redundancy design query

WillyHe — Wed, 30 Aug 2023 15:02:30 GMT

Hello,

Yes , you should use vIST setup in the redundant switch on the DMZ side.
Only then you can connect the firewalls and DMZ servers with LACP to the DMZ vIST cluster switches.

regards
WillyHe

Re: VOSS redundancy design query

gaurav-pandya — Thu, 31 Aug 2023 10:29:08 GMT

Ok Thanks