Firewall Clustering - Physical Topology

[sudeera_mit]

I've got a question on the physical topology of a two pairs of clustered firewalls. Pls see the image below.

Gi0/1 of VPN Firewalls and Gi0/0 of Firewall Cluster are connected directly. Is this a good physical topology to configure a cluster ? What pros and cons are there ?

[Maykol Rojas]

Sudeera,

If the Gig 0/0 and Gig 0/1 go down... the only thing that woulnt know is which interface actually failed, as when the interface from one side goes down, the other one will do so as well as they are directly connected.

That would be the only thing.

Mike Rojas