SG350XG 'local routing' when DHCP Server/NAT/SVI's on FPR1010

[TheGoob]

Hi

I was curious; My FPR1010 is 1G Interfaces. My SG350XG is 10G Interfaces. My hosts in the Server room are 10G Interfaces [as well as other stuff] .... The NAT/ACL/SVI and everything comes from the FPR and is Trunked to the SG350XG and that is L2 Mode.... When my 10G devices communicate [across the multiple vlans on the SG/FPR and all running through the SG] will it downgrade to 1G or will the routing stay "local" at 10G?

If it will downgrade to 1G, what are my alternatives? ASIDE from moving the SVI/DHCP to the SG from the FPR... Is there a way to keep it local?

If I can not communicate 10G across the SG and it's vlans because routing is done on the FPR.... Is my solution to move everything on the SG and just make static routes on the FPR in order to tell it where to find these vlans?

[liviu.gheorghe]

Have to ask - what is the Internet bandwidth available? Because if it's not greater than 1Gbps, configuring a port-channel between the switch and the FPR will help you only in terms of link/port redundancy. In my opinion, who can benefit from 10G communications are the host connected to the switch.

[balaji.bandi]

i think OP was Looking LAN device to have 10GB.

[liviu.gheorghe]

I think the OP has a SG350XG lan switch which gives him a number of minimum 10 10G ports.

[TheGoob]

Hello

Yes everything LAN [Switch, Hosts] are 10G capable. My Internet is 40M nowhere near that, so the 10G is simply for LAN usage transferring across network, streaming 4k movies from server etc. I just decided to source the vlans etc on the Switch so routing stays local and then a link back to internet.

[liviu.gheorghe]

You will be doing NAT on the FPR only fir traffic going to the Internet. 

[TheGoob]

I am too literal. Would the ACL's still be on the FPR or would I move the ACL's to the Switch being the SVI's are there?

[liviu.gheorghe]

On the FPR you will have ACL’s for controlling traffic through the firewall. On the switch you will have only routing.