Redundancy for two 3850 switches deployed as core

[adeebtaqui]

Hi All,

Can somebody share their experience or knowledge of best solution for redundancy for two 3850 switches at core?

Customer has existing 3850 48(with ip services ) that he wants us to make redundant.

Is hsrp the only way? 

Moreover, customer has only one firewall as external and one as internal as shown in attached.

[balaji.bandi]

I have looked at the diagram, Looks like you have  already added new 3850 standby Switch in the diagram is that correct?

That is way to go, yes you can use HSRP / Look at Cisco CVD to get more knowledge

https://www.cisco.com/c/en/us/solutions/design-zone/networking-design-guides/campus-wired-wireless.html

BB

[adeebtaqui]

The diagram is proposed by customer but we are not sure if redundancy will be as in vss-6500 switches and also there is only one Fw. So should we connect 3850 switches on hsrp redundancy to one FW. 

Is there any redundancy solution to one connection to one FW from hsrp(on interface vlans) redundant 3850 switches?

[balaji.bandi]

In  your case FW is dependency- either you propose cluster FW, or if the business have no budget please connect as necessary connection to both the switches.

BB

[adeebtaqui]

No budget. So how to connect to both.

Is it then required for IT to physically connect fw to backup core 3850 whenever active is down?

Is there any other way that the core switches can be in redundant connectivity to fw?

[Yogi-Bear]

The best is to stack and create multichassis etherchannel. Its easy to support, cheap and no meddling with protocols like SPF or FHRP