NW Design full-fledged redundancy

[avilt]

I have a few questions regarding the full redundant network solution. Please refer the attached  network diagram.

1. Assuming the switches underneath the firewall are L2, what are the main configurations needed on the switch and the firewall? For example from firewall-1, one cable goes to SW-1 and one more cable goes to SW-2. Same with firewall-2 as well. How is the full redundancy solution going to work?

2. Now assuming the switches underneath the firewall are L3, how is full-fledged redundancy achieved?

[Harish Balakrishnan]

Hello

You have 2 design options in this case

1. Stack the switches and have one link to ASA-1 ( from stack member1) and another link to ASA2 ( from stack member2)

2.If switch doesn't support stacking, you can connect Switch-1 to ASA-1 and Switch-2 to ASA-2 and have a ether channel between the switches.

either of this design should survive single point of failure

Harish.

[avilt]

Just to clarify, I see two inside interfaces on firewall. Are they independent or grouped like teaming/grouping?