My recommended topology sceanrio as follows :
Internet
|
|
Internet Router
|
Fortigate Firewall
|
Access - sw
/ \
Core-sw-1--------- core-sw-2
/ \
Dist-sw-1 ----------- Dist-sw-2
/ \ / \
Access-1 Access-2 Access-1 Access-2
| | | |
VLAN10 VLAN 20 Vlan 30 VLAN 40
I hope , the above topogy is undersandble and giving short note on the above scenario
1) In this project we are using one cisco 1900 series router as internet router
2) Fortigate firewall is a Internet firewall
3) Two core-sw as 4506 series and two 3750-X as distribution and 2960S switches as access
4) There is a cross connectivity between distribution -1 to core-sw2 and distribution-2 to
Core-sw-1 ( Not shown in Above diagram)
There is connectivity between distribution switches ( shown in diagram)
5) Each access-sw is in each vlan and connected to distribution , end devices are connected to access-switches
Requirements :
1) HSRP configuration including Loadbalancing for each VLAN means some vlans
Core-sw-1 is active and core-sw-2 is standby and viceversa
2) If we go to HSRP-Loadbalancing , How to configure VTP , can we configure two core-switches as server mode then how it works if core-switch-1 fails how the vlan database reflects in other core-switch-2
3) How to configure STP , can we configure Core-Sw-1 as a Root bridge for some vlans and
Core-Sw-2 as root bridge for a remaining vlans , How core-sw-2 will become a Root bridge for the vlans are through Core-sw-1 , if core-sw-1 gets down
4) How the redundancy will be happen , if one core-sw-1 goes down how the repspective vlans traffice will turn through Core-sw-2
5) How the VTP database will be reflected in Core-sw-2 if Core-Sw-1 gets down
6) will do intervlan in Distribution switches , is it ok? , can we make distribution , access switches as a client mode in VTP configuration , i think it wont give any issues , so that
VLANs configure in Core-Switches will be reflcted in each distribution / access-switches
Pls provide a solution for the above and suggest your comments
Regards
Ramu
2. Normally in a heirarchical model, the distribution switches are Layer 3. In your case, it sounds like they are Layer 2 only. I would eliminate the distribution switches and dual-home all of the access switches if you can. Having them only adds complexity and a lot of loops that STP has to resolve (also if you're using VTP, every vlan is on every switch and since you have a separate spanning tree for each VLAN, the problem is multiplied).
3. With the access switches dual-homed to the core switches, everything becomes much, much simpler. Configure all vlans on both core switches. If you want to load-balance your HSRP, that's fine and very commonly done. However, I would use standby tracking and track the interface that connects toward the internet. That way if the link to the internet goes down on one switch, HSRP will switch over to the good core switch.