PIX Inside and MSFC HSRP

[paulawong]

Hi,

Just wondering if anyone knows if there is a difference between the following:

PIX's inside is 10.10.10.4

MSFC VLAN 10 - HSRP Primary Active's IP is 10.10.10.1 --> defaulte gatway is 10.10.10.4

Workstation on 10.10.10.x pointing to gateway 10.10.10.1

versus

PIX's INSIDE 10.10.20.2

MCSF VLaN 20 - 10.10.20.1 -- default gatway 10.10.20.2

MCSF VLAN 10 - 10.10.10.1 HSRP Active --

workstation default gateway is 10.10.10.a

the difference between the two scenario is an addition of VLAN 20 in the

second scenario. I think there is really no difference. Some else I asked

that they may be a routing advantage to adding another VLAN , like VLAN 20,

and put the PIX's inside interface on that VLAN.

Any one has input? Greatly appreciated.

[gfullage]

Don't know there's much difference, other than the 2nd scenario obviously has one more hop to go through.

I would think in the first scenario, with the host pointing to the HSRP address, the HSRP primary will send an ICMP redirect to the PC to tell it to send all its packets straight to the PIX anyway, so you wouldn't hit the HSRP address after the first packet to a destination.