Calling Cisco experts - Need help with Cisco 3750 Routers
Posted on 2014-01-23
There are two firewall (hardware) appliances, configured as High Availability (HA) in active passive mode.
In the current configuration, all routing is handled by the firewall appliances.
The idea is to move the routing to two Cisco 3750 (layer three) switches. Two Cisco switches have been selected as another point of failure is being introduced. This way there can be redundancy with the two Cisco switches; If the main Cisco switch fails, the second Cisco switch is available and will still allow network traffic to be routed / transmitted as it should.
I have had a "Cisco" expert come in and propose a solution using the Cisco switches.
He proposed "stacking" the Cisco switches (Master / member). In his proposal, each firewall will have two cables connected to the Cisco switches - 1 connection to the Master (firewall port 3), 1 connection to the member (firewall port 4).
Because the firewalls are configured for HA, the configuration of each unit is a mirror of each other (i.e. identical). That means that each firewall is pointing to the same gateway addresses (for routing) although the routes in the secondary firewall are not active while the primary firewall is function.
Will this configuration work? Is "stacking" the Cisco switches the right way to go?
Any information / suggestion would be greatly appreciated.
Thanks in advance.