NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
VRRP using two switches and two Firewalls
Is it possible to use VRRP on two switches, which are linked together and are also linked to two firewalls? To allow failure of either 1 switch and 1 firewall?
I assume from the documentation that two ports on each switch would be configured to connect to each firewall? IS that correct?
Thanks
Chris
1 Reply
HI Crhis,
Welcome to our NETGEAR community,
With a VRRP you could achieve redundancy across the switches and firewalls on layer 3, however will not be the most effective protection for a physical or a HW failure, and also you have to conisder that the convergence time after a failure in VRRP is arround 1 minute.
Regarding your scenario one recommendation would be to use our M4300 stackable switches . Both switches will work as a single unit and thanks to our NSF architecture your sessions will remain active if one switch fails. Moreover you will manage both switches like one switch so it will also help a lot to configure VLANs, Routing,etc..
About the redundancy on the routers , you can use a firewall that supports High Availability configurations or VRRP. However if your firewall doesn't have this capabilities you can use our Policy based feature that is implemented in our M4300 switches to redirect the traffic to the backup firewall/router if the main router fails. Please have a look into our manual in the page 200.
Also please take in mind that you should connect each firewall to the two switches to have link redundancy, one recommendation here is to use LACP as both links will be active.
Xavier Lleixa
NETGEAR CBU PLM
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
