Checkpoint Firewall connectivity with Two Cisco Switch

[Ethen NY]

Hi All,

I have to create a setup where in one check point firewall connects to two different cisco switches. The cisco switches are connected via a trunk.

So from each cisco switch there should be connectivity to the same firewall and if any switch fails or interface goes down there is no impact as there is dual connectivity.

These switches are connected to other uplink switches via ospf.  Please suggest some solution from both switches and checkpoint side. as well. I am prefering Static Routing between Switches and Firewall.

[dukenuk96]

If Checkpoint supports feature like 'backup interface', no switch configuration change is needed.

If not, and you really do not want (however I would recommend) to configure dynamic routing between switches and Checpoint, you can use IP SLA feature to track state of interfaces, IP reachability, etc.. and make routing table changes based on this.