NGAF Bridge pairs

Show author only · Posted 26 Mar 2024 13:41

hi,

if we deploy as 4bridge pairs,how manay physical eth port does the NGAF needs to fullfill requirements

1.8

2.9

3.10

4.11

Show author only · Posted 28 Mar 2024 16:50

In a 4bridge pair deployment, each NGAF appliance requires 8 physical Ethernet ports to fulfill the requirements.
This is because each appliance needs 2 ports for management, 2 ports for data, 2 ports for HA, and 2 ports for bridge.

Therefore, for a 4bridge pair deployment, you would need a total of 10 appliances. Each appliance requires 8 ports, so the total number of physical Ethernet ports required is 10 * 8 = 80.

However, since each appliance has 9 physical Ethernet ports, you would only need 10 appliances * 9 ports/appliance = 90 ports.

Therefore, the answer is 3. 10.

Show author only · Posted 03 Apr 2024 16:57

Hi,
The answer is 10.

Show author only · Posted 03 Apr 2024 18:09

Hi, good question. I think toot that the correct answer is 10.

Show author only · Posted 04 Apr 2024 01:44

10 is the correct number in your case.

Show author only · Posted 04 Apr 2024 08:19

the answer is 10. here's why.

- 8 is too few ports if you need dedicated ports for separate network segments, HA cluster communication, and management access.
- 9 is also too few and might not provide enough flexibility for complex network configurations.
- 11 ports would likely be sufficient, but overkill. Unless your specific requirements necessitate a significant number of dedicated ports, 10 ports should be enough for most deployments.

Show author only · Posted 04 Apr 2024 11:01

For a Sangfor NGAF deployment with 4 bridge pairs, the minimum number of physical ethernet ports you'll need depends on several factors:

Network Traffic Flow: The number of physical interfaces required depends on how your network traffic flows and how you plan to use the Sangfor NGAF for tasks like routing, inspection, and management.

Here's a breakdown of possible scenarios:

Basic Routing and Inspection (Minimum):
      If the Sangfor NGAF will only perform basic routing and inspection duties, you might be able to get by with 6 physical ports. This would involve:
         2 ports for the bridge pair interfaces (incoming and outgoing traffic).
         2 ports for the internal LAN (trusted and untrusted zones).
         1 port for management access.
         1 optional port for redundancy (depending on your needs).

Advanced Routing and Security Features (More Likely):
      In most cases, for a production deployment with advanced features like multi-WAN links, DMZ, or redundancy, you'll likely need more than 6 physical ports. Here's a possible breakdown:
         4 ports for the bridge pairs (2 pairs).
         2 ports for the internal LAN (trusted and untrusted zones).
         2 ports for separate WAN connections (if using multi-WAN).
         1 port for DMZ (if needed).
         1 port for management access.
         1-2 optional ports for redundancy on critical interfaces.

Considering the above scenarios, options 3 (10 ports) or 4 (11 ports) would be more suitable for a Sangfor NGAF deployment with 4 bridge pairs, especially if you plan to use advanced features or want redundancy.

Here are some additional recommendations:

Consult Sangfor Documentation: Refer to the Sangfor NGAF deployment guide for your specific model for the recommended number of ports based on your desired configuration.
Network Design Considerations: Plan your network traffic flow and consider how the Sangfor NGAF will be integrated into your network. This will help determine the specific number of ports needed for different purposes (WAN, LAN, DMZ, etc.).

By carefully considering your network requirements and consulting the Sangfor documentation, you can determine the optimal number of physical ethernet ports needed for your 4-bridge pair Sangfor NGAF deployment.

Show author only · Posted 04 Apr 2024 17:20

To fulfill the requirements for a 4-bridge pair configuration, you would need 8 physical Ethernet ports (4 ports for primary devices and 4 ports for secondary devices)