The scenario
An enterprise backup environment uses a dedicated backup switch behind a firewall to isolate backup traffic. The backup server writes encrypted data to disk and tape, with an OKM key manager supplying encryption keys and an admin console for management.
What is in this drawing
Read the decisions behind it.
01
Placed the backup network behind a firewall to isolate backup traffic from the core.
02
Segmented backup server, disk pool, tape library, key manager, and admin console into separate VLANs.
03
Used fiber 10G uplinks between core, firewall, and backup switch for high throughput.
Use when documenting an on-premises backup and recovery architecture that includes disk and tape targets, encryption key management, and network segmentation.
More like this