Hello David,Site-A setup is WAN Switch --> Firewall --> Core Switch --> Access Switches.There multiple L3 SVI's configured on Core Swicth, and a Default Route "ip route 0.0.0.0 0.0.0.0 192.168.254.1" towards the Firewall.The Firewall have 2 routes:- ...