VRF

[gcook0001]

I haven't used Virtual routers at all up to this point. I am wondering about this type of configuration

The two connections from the cloud are connections to us from clients. Currently we have them coming to one of the switches and then added to the trunks to the firewalls. I was wondering if we could eliminate on the switches and remove the subnets from the trunks and have the connections go directly to the firewalls. We only have one connection per client so we would need to extend the connections between the two firewalls. I realize that if the one firewall goes down we lose the connections but we have the same issue using the switch. 

[MHM Cisco World]

but there is no SW connect both FW outside ? can you confirm 

MHM

[Cristian Matei]

Hi,

   To not loose redundancy and avoid using dedicated ports on the firewalls, best would be to keep the switches, however make it be only layer 2; so move the layer 3 part up to the firewalls.

Best,

Cristian.

[gcook0001]

I am trying to resolve an issue and I thought this would provide an answer. We moved to a different brand of switches. We have two MPLS connections from clients and I can't get the connections to work on the new switches. Case of each side pointing the finger at the other side but that is a different issue. I had a thought that if this worked not only would it solve that problem but also help reduce unnecessary traffic. The MPLS only provides a single connection so currently they go into a switch and then a connection is provided for each firewall. Either way I am going to have a single point of failure. I built a mockup in CML and verified it isn't going to work. Thanks for the replies.

[Aref Alsouqi]

Is this issue now fixed or are you still need support? if so, would you mind to elaborate a bit more on what do you mean by can't get the connections to work on the new switches?