topic Firewall connectivty to redundant core switches in Network Security

Firewall connectivty to redundant core switches

adeebtaqui — Fri, 21 Feb 2020 15:38:29 GMT

Hi,

Can soneone please share their design experience for physical connectivity between 2 redundant core switches to one firewall to 2 redundant aggregation industrial switches?

Can we connect directly to firewall as shown in attached?

Re: Firewall connectivty to redundant core switches

Florin Barhala — Tue, 17 Apr 2018 12:37:25 GMT

You can try creating a bridge group on the firewall then rely on STP to take care for one of the links.

Re: Firewall connectivty to redundant core switches

adeebtaqui — Tue, 17 Apr 2018 13:00:04 GMT

We are configuring HSRP on the industrial aggregation switches and core switches. Will this be enough for movement of traffic to firewall from the active switch?

Re: Firewall connectivty to redundant core switches

Florin Barhala — Wed, 18 Apr 2018 12:06:04 GMT

HSRP will do fine. Your main concern would be L2 traffic rather than packet routing between L3 devices.