Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi Experts,I'm validating a hybrid design combining L3 gateway redundancy (VRRP router-on-a-stick) with IEC 62439-3 PRP. Would appreciate your critique on standards alignment and latent failure modes.### Proposed Architecture* **Core Gateway:** Dual ...
Hello Expert,I’m seeking best-practice guidance for an OSPF hub-and-spoke design and would appreciate feedback on my proposed Area placement.Network summarySites: 5 (1 HQ hub + 4 remote spokes)Requirement: Spokes must only communicate with the Hub; n...
Hello Expert,I'm working on a somewhat complex network design and could use your expertise. I have two sites, each with a similar setup: a firewall and a Layer 3 switch.At Site 1, the firewall is deployed in a "router-on-a-stick" configuration with t...
Scenario Overview:Firewall Configuration:Firewall 1 and Firewall 2: Configured in High Availability (HA).Primary Connection: Firewall 1 is connected to Switch 1 via a routed port configured with an IP of 1.1.1.1/24. Switch 1's port is set as an acces...
Hello Experts,Apologies for the straightforward question. I'm curious about the distinctions between a span port and broadcast packets.Let's consider a scenario where we have a switch with multiple source links connected to it, and a single link conn...
For the DSL link, there is very limited flexibility since it is outside of our control, so at this time there are no alternative options available.We couldconsidered a single OSPF area, but i wanted to be hub as a strict central control point to blo...
@Joseph W. DohertyThank you for the detailed explanation and for sharing your experience. The primary path in our design is a dedicated fiber link under our control, while the backup path is a DSL link managed by the service provider and not under ou...
Hi, thanks. I've currently brought down the firewall-to-firewall IPsec tunnel as I'm testing the GRE tunnel connectivity.You're right — the firewall is dropping traffic because it's entering through VLAN X and exiting through VLAN Z. upon troubleshoo...
