That was one of my concerns about traffic going across the interconnect as it would choke to 100Mb instead of the 1Gb uplinks being used everywhere else, but does confirm my understanding of how the traffic would flow if an ISP router fails so thankyou.
Just to clarify, I meant the interconnect between the switches and not between the firewalls in case that was what you were talking about.
As far as failover goes I have never used the redundant interface feature as I never needed to so I'm not sure but I remember the configuration guides do mention it, I have just forgotten it :-)
I wouldn't have thought it failed over if one of the redundant pair failed though as then I can't see the point of using redundant interfaces if you see what I mean.
Where I think redundant interfaces are really useful is for example you have one firewall connected to a switch. That would give you protection from an interface failure.
The way I did it with a failover pair was to simply connect the active firewall to one switch and the standby firewall to the other.
You still get failover if either an interface on the firewall or the whole firewall fails but looking at your diagram in certain circumstances that could mean the traffic from the standby firewall has to go across the switch interconnect to get to the HSRP active switch whereas with your setup using redundant links it could go direct.
I'm not saying you shouldn't use them, just that I can't see a huge advantage assuming that the switch interconnect is the same speed as all the other connections.
I'll have a bit more of a think about it and go through some failure scenarios but I think it would work either way.
Jon
