Firewall connectivty to redundant core switches

[adeebtaqui]

Hi,

Can soneone please share their design experience for physical connectivity between 2 redundant core switches to one firewall to 2 redundant aggregation industrial switches?

Can we connect directly to firewall as shown in attached?

[Florin Barhala]

You can try creating a bridge group on the firewall then rely on STP to take care for one of the links.

[adeebtaqui]

We are configuring HSRP on the industrial aggregation switches and core switches. Will this be enough for movement of traffic to firewall from the active switch?

[Florin Barhala · Accepted solution]

HSRP will do fine. Your main concern would be L2 traffic rather than packet routing between L3 devices.