01-18-2017 05:25 AM
Hi all,
Here's a network design issue we have run into. Our network consists of a single 5050 that services two core switch routers. Each core has a single connection from itself to the 5050. They are OSPF routed interfaces. Users can traverse either core device to reach the 5050 and the internet. We have a new application that is hosted on a single server that has an two ntwk adapters. One server adapter into each core device. One adapter is active the other is passive. The (VM) application will place users on a unique (vlan) network where the given gateway address would be a sub-interface on the 5050. This user vlan/ntwk is passed at layer 2 accross the core switch to the 5050-- so no routing in the cores for this vlan/netwk.. If the server primary adapter fails it falls over to the backup adapter and the user now would traverse the other core device which has its unique connection to the 5050.. Since this does not affect the given ip and gateway the user recieves the user now cannot find the gateway because it is on the wrong interface on the 5050. The 5050 to core interfaces each carry multiple sub-interfaces currently. Is there a way to have the same gateway address on two individual ports on the 5050. We are also looking at the application to see if there is a solution.
thnks in advance
walt
01-18-2017 05:40 AM - edited 01-18-2017 05:42 AM
Hi Walt
you'll want to post questions like these in the discussion area @ https://live.paloaltonetworks.com/t5/General-Topics/bd-p/members_discuss rather than the Community Feedback 🙂
(to reach a wider audience than just the community team 🙂 although we do have all the answers 😉 )
In regards to your question: you could opt to switch your interfaces on the firewall to layer2 mode : Getting Started: Layer 2 Interfaces
This way the physical interfaces will start behaving like a switch would. You can add a virtual layer3 interface to act as default gateway accessible on all intefraces that have been set to layer2 mode.
01-18-2017 01:55 PM
Just to let you know that I moved this article to the General Topics area.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
