Stacked switch to two firewalls

[Ji-Won Park]

Hi everyone,

I'd like to get some idea of different ways to design the attached topology.

There is a stacked switches 3750, and two PAN firewalls. I'd like to connect each interface on different switch stack directly to the firewalls. There is no switch in between.

Your idea would be much appreciated.

Thanks,

[Karsten Iwen]

You can do it directly as in your drawing. Thats a quite common setup.

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

[Ji-Won Park]

Thanks for the feedback...

Should I create an SVI for V99 and make them access ports?

int vlan99

ip add 10.1.99.1 255.255.255.240

int g1/0/48, g2/0/48

sw mo acc

sw acc v 99

Would this work?

What kind of configuration needs to be done on F/W side?

[Karsten Iwen · Accepted solution]

int g1/0/48, g2/0/48

  sw mo acc

  sw acc v 99

  switchport nonegotiate

What kind of configuration needs to be done on F/W side?

nothing special. IP-addresses in the 10.1.99.0/28 subnet with 10.1.99.1 as the gateway.

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

[Ji-Won Park]

Cool. I just wanted to confirm before I touch the devices.

Thanks a lot.