Hello,
I am attaching a design for connecting campus layer catalyst Catalyst switches to Data Center N9k switches via a pair of FTD 4100 appliances in (Transparent mode) Active / Standby.
The top catalyst L3 switches connect to FTD by regular spanning tree links and run HSRP. N9k pair connect to FTD via vpc. OSPF runs between L3 Switches and N9k switches (adjacency established).
I have some concerns,
Are there any flaws or future issues that we could face using this design, and what test cases are recommended to try to ensure proper flow during failover scenarios.
Initially, we used a single FTD device connected to the two N9k switches and Ospf adjacency was being established to ONE N9k switch; the other was stuck in extstart state. When we introduced the second FTD as standby, ospf came up for both N9k switches. I wish someone could explain this behavior.
For this design, is it advantageous to have FTD in Active\Standby config or as a Master/Slave Cluster.
All help is appreciated.
Moe Shea
