Sunday, January 7, 2018

Same lan subnet shared between two sites (for DR setup). How? Best pactice?

OK, first of all. I am used to working with L3 networking, VLANS, multiple subnets at different locations, etc. I have a good understanding of networking, but this is out of my current understanding. So i am looking for advice on what is possible, before getting a consultant in on this. (Basically i would really like to understand what is possible, and be prepaired for the solutions, ask the right questions, and avoid upsell).

We have two sites with two VMware clusters. One is HQ were everything lives, and all branchlocations connect back to. Everything is central - onpremise, nothing is in the cloud. We also have a second cluster at a branch office, that we plan to setup for DR if main site truly dies. Both sites have redundant ISP connetions.
Branchoffices and other connections can easily be pointed to the new site and reconnected, if main site is all smoke and ashes. (We use Sophos UTM + RED devices, and some IPsec tunnels for this).
Backup site is for now connected back to main site with Sophos RED50, including all VLANS etc.
We use Veeam for backup, and also replicate VMs to the second site for quickly getting up again, if main site burns down.
But we have a lot of industrial SCADA systems, that would take forever to reconfigure to new IP adresses, if the servers were moved to another subnet, due to a failover.

Basically what i want to, is having the same subnet running on two different sites, at the same time.
I know there is ways to do this in a lot of different ways, ive just not ever stuck my head into this, and i just want to know some pointers on what ways this can be done, so i can focus on finding the right solution.



No comments:

Post a Comment