Sswitch redundency for Public & DMZ segment

[avilt]

I would like to have switch redundency for LAN and WAN segments and I am planning to implement this as shown in the attached diagram. Any recommendation is appreciated.

Also what is the best way to manage the switch in public segment as assigning public IP is not recommended to the switch.

[Collin Clark · Accepted solution]

Looks like a standard setup and should work just fine. As far as managing "public" equipment, you have a couple of options. You could use out of band (ie use a another box to connect to the console port) or you can give the switches and routers private IP's and route them through your firewall to the internal network to the necessary resources.

Hope it helps.