topic Floating ip on a single firewall? in General Topics

Floating ip on a single firewall?

vnt90 — Wed, 18 Jan 2017 13:25:30 GMT

Hi all,

Here's a network design issue we have run into. Our network consists of a single 5050 that services two core switch routers. Each core has a single connection from itself to the 5050. They are OSPF routed interfaces. Users can traverse either core device to reach the 5050 and the internet. We have a new application that is hosted on a single server that has an two ntwk adapters. One server adapter into each core device. One adapter is active the other is passive. The (VM) application will place users on a unique (vlan) network where the given gateway address would be a sub-interface on the 5050. This user vlan/ntwk is passed at layer 2 accross the core switch to the 5050-- so no routing in the cores for this vlan/netwk.. If the server primary adapter fails it falls over to the backup adapter and the user now would traverse the other core device which has its unique connection to the 5050.. Since this does not affect the given ip and gateway the user recieves the user now cannot find the gateway because it is on the wrong interface on the 5050. The 5050 to core interfaces each carry multiple sub-interfaces currently. Is there a way to have the same gateway address on two individual ports on the 5050. We are also looking at the application to see if there is a solution.

thnks in advance

walt

Re: Floating ip on a single firewall?

reaper — Wed, 18 Jan 2017 13:42:31 GMT

Hi Walt

you'll want to post questions like these in the discussion area @ https://live.paloaltonetworks.com/t5/General-Topics/bd-p/members_discuss rather than the Community Feedback 🙂

(to reach a wider audience than just the community team 🙂 although we do have all the answers 😉 )

In regards to your question: you could opt to switch your interfaces on the firewall to layer2 mode : Getting Started: Layer 2 Interfaces

This way the physical interfaces will start behaving like a switch would. You can add a virtual layer3 interface to act as default gateway accessible on all intefraces that have been set to layer2 mode.

Re: Floating ip on a single firewall?

jdelio — Wed, 18 Jan 2017 21:55:00 GMT

Just to let you know that I moved this article to the General Topics area.