Cisco 6500 switch GLBP and Juniper firewall deisgn

[SIAVASH KAZEMI]

Hi,

Assume that we have 2 Cisco 6500 series which redundant via GLP,

now my question is how can we connect a Juniper SRX firewall to our core switches?

does anybody have the best practice or design tip for this condition?

especially I'm worry about STP configuration.

Best regards

Siavash          

[SIAVASH KAZEMI]

so it seems I finally found the solution,

in Juniper side we can use the VLAN port. then assign to ports to the same vlan.

GLBP is working very nicely in test phase.

however this design is not in production yet, will go next week on production and I'll update you about the performance.

[Reza Sharifi]

Hi Siavash,

If you are connecting a set of Juniper SRX firewalls to a set of Cisco 6500, you can run VRRP on the 6500. You also need a link between the 6500s.  Also, if your SRXs are 210 and higher model, you can cluster them together to make both firewalls one logical device.

HTH