Basic Router/Switch/FW Design

[daniel.bowen]

Hi All,

Looking at the attached design, should it work?

my trace route from the local network dies at the FW with the FW reporting the network unreachable when I try to ping out to the Internet.

Is there anything fundamentally wrong with my design?

Forget the private IP addresses I have put on the design, I just wanted to illustrate the subnet boundaries.

The switch is L2 only, and has VLANs 10 and 20 configured on it. No routing exists on the switch.

Any help would be great,

Dan

[daniel.bowen]

Just to let you guys know, there is a default route on the FW's pointing at ISP router 2. There is no default route/gateway configured on the switch.

Cheers,

Dan

The FW's are running VRRP on all interfaces (internal and DMZ ints not shown on diagram) and all clients machines gateways point to the VRRP address of the specific network.

When I trace route from the internal network the FW reports destination net unreachable.

Thanks again,

Dan