Home :: Content

Datacenter Enhancements "Geographic Diversity" Version 1.0


HSRP.jpg
Quick View
Summary: 

The UTO Operations System & Security group at Arizona State University (ASU) has shown a need for geographical diversity in the placement of the Datacenter complex Firewalls. In order to provide the requested Geographical diversity, Hot Standby Router Protocol (HSRP) will need to be extended to the ISTB1 Data Center. Extending HSRP across the ECA, ECB and ISTB1 data centers will create a more flexible and diverse network within datacenter complex. Once the network is geographically diverse, the firewall clusters can be moved to diverse locations

Start Date: 
May 7, 2009
Go Live: 
September 12, 2009
End Date: 
September 25, 2009
Current Milestone: 
September 12, 2009 Configure the HSRP pool to include the ISTB1 datacenter
Stage: 
Recently Released - Completed in last 3 months.
People
Sponsor/Champion: 
Adrian Sannier, Vice President and University Technology Officer
Lead Customer: 
Jack Hsu
Lead Customer: 
Greg Wilson
Project Manager: 
Duane Woerman
Contact for more information: 
Duane.Woerman@asu.edu
Associate VP University Technology: 
Bob Nelson
University Technology Director: 
Dave McKee
More Info
Source: 
Internal
Priority: 
Medium
Scope: 

The UTO Office Ops System & Security at Arizona State University (ASU), along with Network Communications, has reviewed the current data center complex network infrastructure and determined that network geographical diversity is necessary to provide VSX-1 Firewall redundancy. To provide the infrastructure, UTO Netcom will extending the current two router data center HSRP design to a three router data center HSRP design. This will position UTO to meet the need for diversity in the data centers and will provide better protection to the critical systems within the data center complex. After the HSPR is complete, the firewalls that front the datacenter will be located in geographical diverse buildings (ECA & ISTB1)

All Milestones and Schedule: 

Provide a cost estimate (Complete)

Get project approved 5-21-2009 (Complete)

Move VSX-1 firewall to provide geographic diversity 5-22-2009 (Complete)

  • Move one half of the VSX-1 firewall cluster to ISTB1
  • Move on half of the VSX-1 firewall cluster to ECA
  • Test failover of VSX-1 firewall cluster

Stabilize current HSRP routing environment 7-31-2009 (Complete)

  • Add all VLANs to all current HSRP routers
  • Make all VLAN's members in the current HSRP pool
  • Make all static routes consistent within the current HSRP pool
  • Test failover

Prepare ISTB1 router for addition into the HSRP September 12, 2009

  •  
    Upgrade current backbone connections from ISTB1 to 10GB

Configure the HSRP pool to include the ISTB1 datacenter September 12, 2009

  • Add all VLANs to all HSRP routers
  • Set failover hierarchy in HSRP router pool
  • Add additional twisted pair Ethernet capacity in ISTB1 router to facilitate firewall deployment in ISTB1
  • Test failover and create long term failover testing of the HSRP pool



Deliverables: 

Provide a terciary backbone router connection for the UTO datacenter and geographic diversity for the firewalls.

Risk & Threats: 

Current HSRP environment will create connectivity issues in the datacenter should a single building have a power failure.
Availability of network support resources.

Links
Final Change Management
Syndicate content