inter vlan routing on layer 3 switch or firewall

just looking to get some opinions on whether it is better to configure inter vlan routing on a layer 3 switch or do it directly on the firewall.

what do you guys prefer.

any suggestions on pros and cons of each method is welcomed.
Who is Participating?
QlemoConnect With a Mentor Batchelor and DeveloperCommented:
L3 switches usually supply the hardware (special ASICs) to do fast switching, while firewalls will most probably have to buffer the complete packet for analysis, fragmentation/reassembling etc. So L3 switches should perform better.
I agree with Qlemo and using layer 3 switch is so much easier than creating bunch of sub-interfaces for vlans on the firewall.
From a design perspective, you would want to contain your vlan routing at your distribution layer, not at your edge where a firewall would exist. So keep vlan routing at your Layer 3 switch and only route outbound internet traffic to thefirewall. The one exception is if you need these vlans to be secure between one another and need packet inspection. In that case you would want the firewall to route the traffic between the vlans or be some way in line of that traffic.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.