Redundant Ports

[NiteshS]

Hi,

the customer is looking for a redundant ports as there looking for a cross connection between two different switches.

is this possible? etherchannel/aggregate port configuration doesn't solve that issue as aggregate port goes in the same switch only.

Please suggest a way to resolve this.

Thanks & Regards

Nitesh

[reaper]

Hi Nitesh

if your switch supports spanning portgroups/aggregates across different chassis in a stack, you can solve this issue with an aggregate port group

If you are unable to stack your switches, you could try setting multiple ports in L2 mode

regards

Tom

[NiteshS]

hence you are saying we will do the following

1. Create a VLAN

2. Create a VLAN SVI and assign this to zone and vr

3. assign multiple ports in the same vlan

4. connect to the FW port to different switch and let spanning-tree on the switch do the blocking of the port.

Regards,

Nitesh

[hshah]

Hi Nitesh,

You are almost correct. Follow bellow instructions.

1.) Created new VLAN

2.) Created new VLAN interface (with L3-forwarding enabled)

3.) Placed new VLAN interface into appropriate security zone (L3-Trust in my configuration)

4.) Assigned new VLAN interface an IP Address (192.168.1.1/24 in my config)

5.) Configured 2 firewall ports as "Layer 2" and placed them into the newly created VLAN from step #1

Commit

On the switch side, I created a vlan in a Brocade switch with 3 access ports.  I also enabled spanning-tree in this VLAN.  Of the 3 ports, 2 go to the firewall and one to a test laptop.

In this configuration, everything works fine!  It takes 30-45 seconds to fail over, and about 15s to fail back - which is expected for standard spanning-tree behavior.

For more reference refer bellow documents.

Re: Redundant links

interface failover on PA500

Regards,

Hardik Shah

[HULK]

Hello Nitesh,

A similar discussion thread for your reference: interface failover on PA500

Thanks