Dual Data Centres 200miles apart - L2 trunking/Gigabit, is this ok?

Hello All,
We've 2 data centres, one primary the other DR, we've also 2 Gigabit fibre links between the 2, 200 miles apart.
To keep the PIX Active/Standby roles across the sites, I'm investigating the idea of linking the 2 datacentres with trunks at L2.
Is this good practice?, I know in the pre-Gigabit days this was frowned upon but these days it would make sense and make design much easier - any thoughts appreciated
Regards Tony

Be careful with spanning tree and L2 links between your primary and DR. If spanning-tree were to have issues at your primary datacentre causing an outage it could also take secondary with it and vice versa.
--Phil
Please remember to rate useful posts

Similar Messages

  • SQL 2012 AlwaysOn Dual Data Centre (an instance in each data centre with a secondary in each other respectively)

    Hi, hopefully someone will be able to find my scenario interesting enough to comment on!
    We have two instances of SQL, for this example I will call them 'L' and 'J'. We also have two data-centres, for this example I will call them 'D1' and 'D2'. We are attempting to create a new solution and our hardware budget is rather large. The directive
    from the company is that they want to be able to run either instance from either data centre. Preferably the primary for each will be seperated, so for example:
    Instance 'L' will sit in data centre 'D1' with the ability to move to 'D2', and...
    Instance 'J' will sit in data centre 'D2' with the ability to move to 'D1' on request.
    My initial idea was to create a 6-node cluster - 3-nodes in each data centre. Let's name these D1-1, D1-2, D1-3 and D2-1, D2-2, D2-3 to signify which data centre they sit in.
    'L' could then sit on (for example) D1-1, with the option to move to D1-2 (synchronously), D2-1,D2-2 (a-synchronously)
    'J' could sit on D2-3, with D2-2 as a synchronous secondary and D1-3,D1-2 as the asynchronous secondaries.
    Our asynchronous secondaries in this solution are our full DR options, our synchronous secondaries are our DR option without moving to another data centre site. The synchronous secondaries will be set up as automatic fail-over partners.
    In theory, that may seen like a good approach. But when I took it to the proof of concept stage, we had issues with quorum...
    Because there are three nodes at each side of the fence (3 in each data centre), then neither side has the 'majority' (the number of votes required to take control of the cluster). To get around this, we used WSFC with Node and File Share majority - with
    the file share sitting in the D1 data centre. Now the D1 data centre has 4 votes in total, and D2 only has 3.
    This is a great setup if one of our data centres was defined as the 'primary', but the business requirement is to have two primary data centres, with the ability to fail over to one another.
    In the proof of concept, i tested the theory by building the example solution and dropping the connection which divides the two data centres. It caused the data centre with the file share to stay online (as it had the majority), but the other data centre
    lost it's availability group listeners. SQL Server stayed online, just not via the AG listener's name - i.e. we could connect to them via their hostnames, rather than the shared 'virtual' name.
    So I guess really I'm wondering, did anyone else have any experience of this type of setup? or any adjustments that can be made to the example solution, or the quorum settings in order to provide a nice outcome?

    So if all nodes lost connectivity to the fileshare it means that there are a total number of 6 votes visible to each node now. Think of people holding up their hands and each one can see the hand. If the second link between the two sites went down then each
    node on each side would only see 3 hands being held up. Since Quorum maximum votes =7, the majority needed to be seen by a node would be 4. So in that scenario, every node would realize it had lost majority and would offline from the cluster.
    Remember that quorum maximum (and therefore majority), never changes *unless* YOU change node weight. Failures just mean then is one less vote that can be cast, but the required majority remains the same.
    Thanks for the complement btw -very kind! I am presuming by your tag that you might be based in the UK. If so and you are ever nearby, make sure you drop by and say hello! I'll be talking at the
    London SQL UG two weeks from today if you are around.
    Regards,
    Mark Broadbent.
    Contact me through (twitter|blog|SQLCloud)
    Please click "Propose As Answer" if a post solves your problem
    or "Vote As Helpful" if a post has been useful to you
    Come and see me at the
    PASS Summit 2012

  • Data centre connectivity options

    Hello
    I am currently investigating a dual data centre design running
    in active/active mode. The data centres will each have connectivity to
    our WAN (MPLS) and to the Internet. They will have also have dedicated
    links to each other for site replication etc.
    Having read a few of the Cisco SRND's what i am still a little unclear
    about is whether it is better to connect the two data centres over the
    dedicated link using layer 2 or layer 3 and what the pros and cons are of
    each. I would appreciate any experiences (good and bad) that people have had
    in this area.
    My instinct is to go layer 3 eliminating a potential spanning tree issue
    that could affect both data centres but i am sure there are more issues
    than this to take into account.
    Many thanks

    i have redundant data centers and they have been setup as follows for specific reasons:
    (these data centers are not separated by a WAN, if they were, a T3 or better would be required in my case but i'd opt for a metro fiber type of solution to provide GB+)
    using the 3 hierarchial network design: core, distribution, access
    1) the CORE is L3/routed; we do not want a L2/switched core for a few reasons. one is to allieviate STP and its inherent problems.
    (the core should be moving packets as fast and predictable as possible; stp can interrupt this and cause complete packet forwarding delay or worse; with todays routers, they can route packets just as fast as switching them, or faster in some cases)
    2) the distribution layer is switched with fully meshed GB or greater trunks to both the cores. also provides redundant intra VLAN routing for all the VLANs controlled in their specific 'distribution blocks'; i have 5 fully redundant distribution blocks with VLAN routing and VLAN load balancing via HSRP.
    (i channel upto 6 GB trunks in a given link)
    3) the access layer is switched with fully meshed GB or greater trunks to at least two distribution switches per access switch; one trunk to each core, at least.
    (there is no routing performed at the access layer)
    other reasons such as the routing operation, location and number of distribution switches, administration and speed affect the design.

  • WAAS Mobile HA between 2 Data Centres

    We have to deploy WAAS Mobile between 2 Data Centres, with remote user connecting to either DC across VPN & then connecting to a local WAAS Mobile server. We are trying to understand the best way to configure this from the available documentation on CCO.
    We are a bit confused re the role of the WAAS Mobile Manager Server.
    Is this similar to the role of Central Manager on normal WAAS, i.e configuration/management etc, or does it have any function in the selection of the server a client will connect to.
    Regarding HA & Load balancing of the connections between the Data Centres, this is how we think we should deploy it!
    Deploy a Server Farm at each DC & use the Latency based method of farm selection. This way the client should connect to the local server farm, based on which DC the VPN connects to?
    Is this correct, has anyone deployed WAAS mobile in this way or have any advice?
    Thanks
    Colin

    Fabricpath is L2; not related to the L3 technology you want to use; if VRF are in use you can just use VLANs which is described in your first scenario : "use 2 routers with VRF lite configuration in each DC, then dot1q on the trunk through the Fabric Path"

  • FabricPath & Layer-3 VPNs (VRF) between 2 Data Centres

    Hi there,
    I'm looking at deploying FabricPath for layer-2 extension between 2 Data Centres.
    We also have the requirement for providing layer-3 services between the 2 DC, as in Layer-3 VPN (MPLS VPN).
    The alternative technology was MPLS, with full blown Layer-3 VPN, and Layer-2 VPNs through AToM or VPLS.
    My question is, how can we provide VRF support over FabricPath?? Can we use 2 routers with VRF lite configuration in each DC, then dot1q on the trunk through the Fabric Path? Or just VRF Lite on the layer-3 terminating routers, with a specific VLAN for interconnecting the different VRFs?
    Thanks,

    Fabricpath is L2; not related to the L3 technology you want to use; if VRF are in use you can just use VLANs which is described in your first scenario : "use 2 routers with VRF lite configuration in each DC, then dot1q on the trunk through the Fabric Path"

  • How to access a Network Share between two servers in same data centre

    I have two dedicated servers (both Windows 2012 Server) hosted in a data centre somewhere.   I want to share a folder on one server with the other server, but it's obviously not as straight forward as one might think.  My servers are called "Maximus"
    and "Apprentice".
    On Maximus I shared a folder by right clicking on it and choosing "Share with... / Specific People", I then typed in the name of a local user account which also exists on Apprentice with the same name and password.  (so each server has a local
    user account with the same name and password).
    So then on Apprentice, I was hoping I could access the share (while being logged in as this user with whom the folder was shared) by simply typing  "\\ipaddress\sharename" into the address bar in file explorer.  Unfortunately it comes
    back with "Windows can not access [ip address]".
    Now, I do have a website setup on the IP address for Maximus.  This is actually the reason I want to create this share.  I need the second server for load balancing and need to share IIS config as well as the website itself.  (So I will need
    two shares eventually, but for now I'm just trying to get one to work).  I don't know if the fact that the ip address is pointing to the website is causing me problems here or if it's something else.
    Are there any network gurus out there who can tell me what the issue is and how to resolve it?

    I can ping both servers in either direction, but I believe I may have found the problem.  Apparently my host is blocking port 445 which Windows wants to use to connect to the share and they will not unblock it.
    Is there a way to connect to the share through a different port?  
    To my knowledge, you cannot change the port. However, you can try disabling your security software for testing. If this fixes the problem then you need to adjust your security software configuration so that traffic on this port is not blocked or filtered.
    This posting is provided AS IS with no warranties or guarantees , and confers no rights.
    Ahmed MALEK
    My Website Link
    My Linkedin Profile
    My MVP Profile

  • Is there any documentation on the BC Data Centre's?

    Hi,
    I have been a premium reseller of BC for over two years but I am struggling to find any documentation about the BC Data Centre's. I have not been asked before but I am launching a delegate Registration Microsite for Symantec and as with all larger companies their procurement process requires evidetiary documentation to be supplied.
    Specifically they are asking for specification or documentation on:
    ISO 27001 certificate and Network Penetration test information.
    Any help or guidance to this information would be greatly appreciated.
    Cheers
    Rob

    Hi Sidney,
    Thanks for the helpful responses. I have had some progress with my queries and have now recieved PCI compliance documentation that BC sent through after your suggested ticket. Moving forward, I think that the shift to AWS will resolve all certification and compliance issues - I imagine this doesn’t come up too often with a product that is aimed firmly at SME’s.
    My issue arose as I work for SME’s who in turn work for Blue Chips. Companies like Symantec, Sony & Canon all have extremely stringent procurement procedures even though they are budget conscious and the inference of documentation falls down the chain to us the technical supplier – the National Account Managers and Product managers just set up the deals and promotions and the legal/financial teams then throttle everyone with paperwork. They have simply been told that any websites which contain staff information must reach a very high standard of security and auditory compliance which is understandable but cannot be answered with ‘well its Adobe… of course they are secure!’.
    I will follow up to the community when I have finished my research and have a result!
    Thanks
    Rob

  • SAP DATA CENTRE Shifting

    Dear Experts,
    As of now our data centre is shifting to other site. As per OS vendor they are asking a downtime of 4 days for shifting/deinstallation and reinstallation.
    But our clinet is not accepting this and asking to provide workaround for this activity. As they are asking for business continuty and should not affect their business for 4 days.
    All the server Racks, Tape library , EVA and etc are shifting in this activity. We dont have Disaster Recovery centre to provide alternatively to client.
    Kindly suggest the action to be taken to provide workaround to client.
    Regards,
    Sandeep

    Hi,
    This process is called homogenous system copy, Please go thr belo link you will get all the doc related to system copy
    System Copy and Migration
    Thanks,
    Sreeni.

  • Self Service Restore - Data Centre Failure

    I'm evaluating the new 'Standard' tier of SQL database and self service restore feature. My question is about where the backups are stored for self service restore and whether they help in a full data centre failure. e.g. If my Standard SQL db is in Europe
    West and the only backup I am using is the in built self service restore. Do I have any protection if Europe West has a major DR event? Or do I still need to export the databases to blob storage to handle this kind of event? (Whereby I would need to restore
    to Europe North manually)

    As indicated in the "Service Tiers Details" table in this
    blog posting , we have a couple of new features which are not yet enabled for the new tiers.
    One feature will be the ability to restore a database to an alternate datacenter in case the primary data center you are using is not available OR for any other reason you may want to restore a database in an alternate location.  This recovery option
    uses geo-replicated backups.  For this feature we only geo-replicate the full and daily backups but not the log backups so point-in-time restore is not possible but you will have an RPO of less than 24-hours.  Think of this as always having access
    to daily off-site backups from any location.  This feature will be available for Basic, Standard and Premium. 
    The second feature which we will enable later is the geo-replication for Standard.  This feature will allow you to opt-in for geo-replicating your Standard database to a passive secondary in an alternate location.  We will have more details about
    this feature in a few weeks.
    Until you have access to one of the above two features you will have to use the export-to-blob for the datacenter failure case.  We are working hard to deliver the above two features as soon as we can.
    I hope this helps.
    Tonyp

  • SQL Server multiple data centres - Synchronization

    Hello,
    I am new to MSSQL. We have a web application that used MSSQL 2012 as backend. We now plan to have the same application hosted in another data centre. We are able to provide the geo-redundancy/HA for the web application. 
    But we also need to make sure that our SQL databases are always in SYNC. The web application in primary data centre is always going to serve all requests. The backup application will only be online if the primary data centre server is down or in maintenance
    mode (once every two weeks).
    How can we achieve the SQL replication (both ways) over the WAN making sure that all data is up-to date. We have users constantly updating information so data is written frequently to the DB (every 5-10 minutes on average).
    Thanks
    SinghP80

    Take a look at MERGE replication.
    Best Regards,Uri Dimant SQL Server MVP,
    http://sqlblog.com/blogs/uri_dimant/
    MS SQL optimization: MS SQL Development and Optimization
    MS SQL Consulting:
    Large scale of database and data cleansing
    Remote DBA Services:
    Improves MS SQL Database Performance
    SQL Server Integration Services:
    Business Intelligence

  • Why do I have so many connection to Apple data centres?

    My home network was a little slow tonight, so checked the traffic flow on the router.  I found hundreds of secure connection to a range of addresses, after checking, I have noted most the remote addresses are Apple data centres and all the internal addresses are from IOS devices. I have around 6 devices at home, all IOS8.
    These conection are not sending large amounts of data and not slowing things too much, however I am keen to know what these connections are for.

    What services do you have enabled in your iGadget?
    Location? Find My iPad? Background App Refresh? Handoff? The iCloud services? To mention a few. And that's just the OS.

  • DMZ VLANs in the Data Centre - Physical or Logical Seperation

    I am building a new DMZ in my Data Centre and I'm looking at the merits of Logical Seperation rather than Physical Seperation.
    Instead of putting in some new DMZ Switches and then physically cabling all the DMZ devices and Servers to these switches so that these are physically seperate from the rest of the DC, I'm thinking of connecting them up to the existing DC Switches and just use a different set of VLANs with the routed interface for these on Physical Firewalls.
    Can people please appraise me of the concerns or issues with this? Are there any articles or design papers on this?
    Thanks

    Come on guys I expected someone to at least make some form of comment!
    It looks like either the community doesn't know or doesn't care!

  • Office Web Applications Farm & Multiple Data Centres

    Hi,
    I noted in the following TechNet article that spanning data centres isn't recommended:
    http://technet.microsoft.com/en-us/library/jj219435.aspx#topology
    Stick to one data center. Servers in an Office Web Apps Server farm must be in the same data center. Don’t distribute them geographically. Generally you need only one farm, unless you have security needs that require an isolated network
    that has its own Office Web Apps Server farm.
    What's the rationale behind this? Is it latency and if so, what's the tipping point before latency becomes an issue?
    Thanks

    Likely latency, but I'm not aware of any published limitations. Opening a PSS case would get those for you. Geographic dispersal is likely an unsupported scenario.
    Trevor Seward
    Follow or contact me at...
    &nbsp&nbsp
    This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

  • When I try to publish my Muse site I get "Query failed" appear in the "Publish to" and "Data Centre"

    What can I do to solve that? It's stopping me from publishing updates.

    Yes, I am publishing it to BC. It happened the other day too but had
    never happened in the previous 9 months that I have been using Muse (and
    BC). Have I really hit two maintenance periods in such a short time?
    Seems quite unlikely but let's hope so.
    Jonathan Phillips
    Head of Marketing
    PACT Educational Trust
    m: 07517 610209
    e: [email protected]
    visit www.pactschools.org.uk
    Open Days ***
    OLIVER HOUSE SCHOOL: THURSDAY 20TH MARCH 10AM-12PM
    oliverhouse.org.uk
    visit the websites for more details ***
    On 03-04-2014 17:18, Brad Lawryk wrote:
    RE: WHEN I TRY TO PUBLISH MY MUSE SITE I GET "QUERY FAILED" APPEAR IN THE "PUBLISH TO" AND "DATA CENTRE"
    created by Brad Lawryk in Help with using Adobe Muse CC - View the full discussion

  • Data centre outage Australia

    Anyone on the Australian data centre experiencing slow response times and outages today? No info on the BC status site and their support chat is offline.

    Hi Simon,
    Please accept our apologies for the outage earlier today.
    It was caused by one our loadbalancers crashing without notice - our Operations team restarted the load balancer and the service was restored.
    Investigation will continue offline to determine the root cause and put up measures in place to prevent this from happening again.
    Once again, please accept our apologies for this incident.
    Kind regards,
    Florin

Maybe you are looking for