active/passive BGP - Data plane VLANS

Jedi_D — Sat, 20 Feb 2021 10:41:29 GMT

Hello,

I'm doing an active/passive set up with BGP. I will have a router to a the active FW. I will have different router to the passive FW. The second FW will only have BGP peers up when the active FW fails.

I am going to have VLANS for the HA 1 and HA2 links.

Do I need to have the data planes (data port dmz interfaces) spanned across the FWs are well?

For example,

FW A interface 1 is 10.0.0.1/24 in Vlan A

FW B interface 1 is 10.0.0.1/24 in Vlan A

Does VLAN A need to be connected between the FWs?

Re: active/passive BGP - Data plane VLANS

reaper — Sat, 20 Feb 2021 23:47:56 GMT

assuming the same servers will be reached when firewallB becomes active, yes you will need a vlan to span the DMZ

topic Re: active/passive BGP - Data plane VLANS in General Topics

active/passive BGP - Data plane VLANS

Re: active/passive BGP - Data plane VLANS