design help

[bluesea2010]

Hi,

collapsed core architecture  and for TOR for servers 

Hi ,

I have the  above  topology,  to access layer is layer 2 and also to TOR switches ( for servers ) 

in firewall, SVI is configured on the firewall for servers

and for access layer svi is on the core switch.

Now I am planning  to change the layer 2 access layer and TOR switch to layer 3 

Please advise regarding the configuration and where should i place the fw 

Thanks 

[balaji.bandi]

Now I am planning  to change the layer 2 access layer and TOR switch to layer 3 

First this required downtime  and  Service interruption

Choose whatever IGP ( i prefer OSPF)

Run OSPF n Core Switch

Bring back any gateway configured on FW for Server to Core Switch.

Configure each leg connected port from Core to Access and Core to tor Layer3 port with p2p IP

so IGP can take care of load share equally/

By the way, you did not mention Core is in VSS ? or Traditional Layer 3 deployment.

Some examples for reference :

https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Campus/routed-ex.html

[bluesea2010]

Hi @balaji.bandi 

The core is  VSS.    

what about TOR switches. If I change SVI to the  TOR switches  or CORE switches ? 

Thanks 

[balaji.bandi]

what about TOR switches. If I change SVI to the  TOR switches  or CORE switches ? 

If you Looking for TOR Switches to be Layer3 (moving from FW) then my suggestion is to convert them to a p2p interface and run the same OSPF, just like other access switches.

This suggestion is based on your requirement,  If you are using FW in the path for Lan network to reach DC (or TOR Switches) some kind of protection, then leaving gateway on FW makes sense. and leaving the TOR switches as Layer 2.

[MHM Cisco World]

https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Campus/VSS30dg/campusVSS_DG/VSS-dg_ch3.html#wpxref28659

Route Access connect to VSS, please read this Doc. 
sorry for my little acknowledge.

[bluesea2010]

Hi @balaji.bandi 

If I  change TOR switches to layer 3, and  routing will be on the firewall, 

is there any benefit?

Thanks 

[balaji.bandi]

If I  change TOR switches to layer 3, and  routing will be on the firewall, 

is there any benefit?

If you change the TOR to Layer 3, I do not see any advantage FW as routing here, your next peer should routing for you.

Personally, that is the best i do in Layer 3 deployment.