Calling Cisco experts: Typical Network Flow Diagram?

[kitkit201]

Hi folks,

Right now, I am trying to configure a network flow diagram for a client. We are moving their production servers from one co-location to another and we want them to be entirely standalone from our environment.

Right now, our configuration is roughly as follows.

Internet --> PIX --> CSS --> Pix--> LocalDirector where LD contains all our app, db and web servers.

We are going to buy a CSS and two web servers in our new environment, and reuse the PIX after having another client move over. Anyways, ideally, we want something like this..

Our plan A
Internet --> Pix --> CSS --> Gigabit Switch (vlan access-list) --> APP, WEB, DBs, Management servers.

Does Plan A's topology seem good or is there something we are missing?

Thanks
Kit

 

[spidey07]

what do you want public and what do you want totally unreachible from the Internet?

Normally...
I---Pix---css/DMZ server----pix---LD---back end servers

 

[kitkit201]

Well, we want the Web Servers to be public and the maanagement network to be public as it will have ftp and a folder to put stuff in.

Spidey-7, Is your first and second Pix the same or one on the border and one on the backend? It seems that we are supplementing the second pix with ACLS on the gigabit switch. and using the CSS as the LD.