topic Re: Maestro design/configuration consideration in Hyperscale Firewall (Maestro)

Maestro design/configuration consideration

wsitu — Wed, 12 Jul 2023 18:41:06 GMT

Hi All,

it seems all Maestro documents recommended dual MHO deployment should be vPC and bond. is it possible to have the uplink configured as L3 independently? Is this supported? what are the drawbacks?

Re: Maestro design/configuration consideration

Dario_Perez — Wed, 12 Jul 2023 18:49:38 GMT

is for High Availability and is not mandatory but is a best practice.

in case you lost any orch if they are not bonding them would be an outage

Re: Maestro design/configuration consideration

Wolfgang — Wed, 12 Jul 2023 20:05:14 GMT

If you configure your uplink bond interfaces as active/backup you don‘t need vPC.
Your draw shows only one SGM, I think it‘s only one for demonstration. Maestro environment with only SGM does not use all the nice features of scalability and redundancy of MAESTRO.

Re: Maestro design/configuration consideration

wsitu — Wed, 12 Jul 2023 22:14:19 GMT

you are correct. I only drew a single SGM for illustration purpose. my concern was the uplink configurations. thanks