Hello and welcome to this lecture in this lecture we're going to talk about the lab topology and session
goals.
So first of biology we have now in front of us talks about the real world network design.
So Esper fortnight documentation you'd have to have both 48 firewalls configured in between a pair of
switches.
And this is the recommended and needed design.
Now let's first now talk about what is what are this red and black lines.
So you see here that management traffic is outlined in red and they are playing traffic.
It's outlined in black.
So in a real world scenario you do separate you.
I mean as a design you basically do separate things related to data plan and management traffic.
So you'd have a management switch and this switch would connect to each of the active equipment in your
topology then the management station will connect to the management B.C. and this way you'll have an
out of band connection to each of the equipments.
So for management now we will not implement this in Genesis 3 software.
So when trying to build a topology so that you can practice along you can practice every every topic
in this course.
And we are not doing this not because it's not possible but because resources on our PCs are limited.
So they are not infinite.
So we we have to save you in memory.
So for this for this reason.
What are we.
What are we going to do is the second option.
So let's erase the board now.
And here is what we'll do.
So by default all of the 48 firewalls not the small ones will have management ports so dedicated management
ports where you will use in a real war scenario again the information in the previous slide in the previous
topology.
Now in our case because we are trying to build this on Janus 3 so that we can practice we will use the
same port both for management and data plane traffic.
And here is basically what we'll do.
So on port one we will configure the uplink so an IP addressing so that it connects to the Internet.
And when this is successful we will move on to the next one port to put one is facing the land and this
will represent basically the default gateway for the land.
P.S. We will configure here again the the IP addressing and we will test connectivity up to port to.
Now after this is successful we will have to provide the door to configured to say so the bridge between
these ports so that the land b c can connect to the Internet and we will do this by implementing net
so network address translation on the 40 gate firewall when this is done you will see that the land
P.C. will be able to access the Internet and it will test this with ping and also an HDTV session will
browse a Web site or something like that.
Now coming back to the course topic when this is when everything is working we'll have to move on and
implement the H.A. cluster.
So the high availability cluster and we have two options.
Option one it's active passive and this means that only 148 will will forward traffic.
So from from the land to the Internet and back and when this fails the slave 48 will take ownership
of this for the role and will will make it that the land P.C. will not see basically any packet drops
or if the if there are any packet drops there will be significant.
The second option is the active active and this means that both of the firewalls were will forward traffic
to the Internet.
So this one and also this one will still have and you will see this in the in the graphical user interface
that one is considered master and the other the other one is considered a slave but in terms of session
forwarding there will be two of them doing this or even more if if we install more than two 48 firewalls
now something that I haven't talked about up to this point it's this port three port four on both of
the firewalls these two links and basically the HRA the high availability heartbeat links.
So when configuring the cluster between these two for Gates they will start to forward packets on this
specific links.
And when the other 48 will see the packets they will try and negotiate the cluster if everything is
successful they will form a cluster.
As I said in active active or active passive.
So this will be all for now.
And I do hope to see you in the upcoming lecture.