Ether-Channel configuration on 2 switchs to a single firewall

[san ju.]

Hello there,

My friend asked me a question about configuring a port-channel on two switches, each with only a single uplink to a firewall. Both switches have VLANs 10, 20, and 30, each with gateways configured on the firewall. While configuring a Router on a Stick (ROAS) technique would be straightforward for a single switch setup, the challenge arises when dealing with two switches that require the same gateway. Is it Okay for configuring switch with only single interface on port-channel? 

Alternatively, stacking the switches is another viable option. I would appreciate guidance on the best approach for this specific setup.

Please fine the attached diagram!

Thanks,

Sanju!

[Joseph W. Doherty · Accepted solution]

To Etherchannel between the FW and two physical switches, the switches would need to be running something that supports that, such as your mention of stacking switches or VSS or vPC.

Or, assuming the FW can bridge two ports, you could also connect those links and use STP or break the physical loop.  This would also allow the FW to provide a GW to both switches, but actual traffic flow will depend on what link STP blocks.

[M02@rt37]

Hello @san ju.,

Creating an EtherChannel between the firewall and two physical switches does indeed require a mechanism that supports it. As @Joseph W. Doherty suggested regarding stacking switches, using technologies like VSS (Virtual Switching System) or vPC (Virtual Port Channel), or having the firewall bridge two ports are all valid points.