Comprehensive AAP and Powerpoint slide.
orebergali
part_3-fw-nids-diagram.pptx
ISP-A-RTR2
ISP-A-RTR1
Gi1/1
Gi1/1
Gi4/5
Gi4/6
Gi4/5
Gi4/6
Te4/1
Te4/2
Te4/1
Te4/2
Po45
Eth47
Eth48
Eth47
6504: Po41
5548: Po47, vPC47
6504: Po41
5548: Po48, vPC48
vPC Peerlink
vPC domain: wwtc-NYC-vPC
Eth1
Eth1
Eth2
Eth2
wwtc-core-swiB
wwtc-dist-swi-A
Spanning-tree Root VLANS:
40,51,52,100,401,402,
601,602,701,702,999
wwtc-dist-swi-B
Spanning-tree Root VLANS:
53,54, 200,300,403,
404,603,604,703,704
wwtc-core-swiA
Network Intrusion
Detection System
Gi 4/7
Gi 4/7
Network Intrusion Detection System
Receives SPAN information from Gi4/7 on
wwtc-core-swiA and wwtc-core-swiB.
SPAN information along with NIDS
intrusion signatures to identify
intrusions.
ISP-A-RTR2
ISP-A-RTR1
Gi1/1
Gi1/1
Gi4/5
Gi4/6
Gi4/5
Gi4/6
Te4/1
Te4/2
Te4/1
Te4/2
Po45
Eth47
Eth48
Eth47
6504: Po41
5548: Po47, vPC47
6504: Po41
5548: Po48, vPC48
vPC Peerlink
vPC domain: wwtc-NYC-vPC
Eth1
Eth1
Eth2
Eth2
wwtc-core-swiB
wwtc-dist-swi-A
Spanning-tree Root VLANS:
40,51,52,100,401,402,
601,602,701,702,999
wwtc-dist-swi-B
Spanning-tree Root VLANS:
53,54, 200,300,403,
404,603,604,703,704
wwtc-core-swiA
Gi 4/8
Gi 4/8
ASA-Service Module Active/Active
Traffic processed on the wwtc-core-swiA
and wwtc-core-swiB are sent to the
ASA-Service Module in a load balanced
configuration. ASA –SM runs in routed
mode to pass traffic from Outside to DMZ or
Outside to Inside and vice versa.
Outside interface
Inside interface
DMZ
DMZ interface
DMZ interface
