Networks

Ask something
Discussion Locked

non-vendor design suggestions requested!

0 helpful
5 replies

by shiny_topadm 2 views

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi, I'm responsible for a small (< 30 users) mixed network (AIX & Win2003 & WinNT servers, XP Pro, XP Home, 98se, and 'terminal' clients). We have a single [1.5K] DSL line for shared internet access (note: the speed is acceptible); we don't host our own website or email. The existing setup is your typical: DSL modem <---> hardware firewall/router <---> switches <---> client and servers. We have recently added some business-critical applications that need internet access (on demand). By "business-critical", I mean that an internet service disruption of more than a couple of hours will cost us money & business. Is it practical to a) add redundancy to the internet connection; and b) somehow separate segments of our network so that if something happens to one client (worm, virus, trojan, etc.) and network traffic 'spikes' that the critical apps can still communicate? Is this a function of different network hardware? I've asked this question to vendors, of course, but I would welcome any independent suggestions.

Thanks, Will

5 replies

by cg it

well depends on who will use the business critical application. I would bring in another line just for it [business critical then it would justify a seperate line] and stick the server running it on a perimeter network.

Personally, if you had the $$, I would get something like a PIX 515 or a Symantec 300 series firewall that can handle NLB and 2 inbound lines with a fail over dialup. OR ISA Server 2004. Depends upon how secure you want the server running the application to be. For very secure, I would run ISA 2004 and put the server behind ISA 2004. Note: ISA 2004 can handle multiple segments by using multiple NICs and you can have multiple ISA servers running in an Array so you can have ISA front end firewall segmenting your LAN from the business critical application server yet providing security for the business critical application server and allow LAN users access.

by wlbowers

Bring in a second isp and terminate both in a router capable of load sharing with failover.

If your phone lines are overhead. You can go as far as requesting a secondary drop be run to the building. One cable down will kill everything running in it.

Make sure that all critical equipment is on UPS support in case of power failure.

NOTE: Don't go cheap on this one. Go to www.apc.com and use their load calculators to determain the run time you need.

Of course all servers and client machines need to be on maintained antivirus protection.

Good Luck

Lee

This discussion is closed to new replies.