topic Re: Direct VLAN traffic to 2 different firewalls in ExtremeSwitching (EXOS/Switch Engine)

Direct VLAN traffic to 2 different firewalls

CHRLX-ENG — Wed, 06 Jan 2021 23:22:44 GMT

We are setting up 2 firewalls for internet access via 2 individual circuits. Currently our default route sends all traffic to firewall #1. We are looking to send all traffic from a single VLAN to the new firewall (firewall #2) and all other VLANS to firewall #1. How do I set up a routing configuration for this?

Re: Direct VLAN traffic to 2 different firewalls

Stefan_K_ — Wed, 06 Jan 2021 23:42:20 GMT

Which switch is in use?

One possibility would be flow-redirect: https://extremeportal.force.com/ExtrArticleDetail?an=000083175

Re: Direct VLAN traffic to 2 different firewalls

Miguel-Angel_RO — Thu, 07 Jan 2021 00:08:29 GMT

Hi,

There are a lot of option possible.

A topology diagram will help to give advise.

Mig

Re: Direct VLAN traffic to 2 different firewalls

CHRLX-ENG — Thu, 07 Jan 2021 03:03:08 GMT

Here is the basic network topology that we have with the new firewall addition

Re: Direct VLAN traffic to 2 different firewalls

Stefan_K_ — Thu, 07 Jan 2021 05:04:53 GMT

The BlackDiamond is the router (the VLAN-Interfaces are on the BlackDiamond?) and routes the traffic to the firewalls?

In this case you could use different VRs or use flow-redirect IMO.

Re: Direct VLAN traffic to 2 different firewalls

CHRLX-ENG — Thu, 07 Jan 2021 05:20:28 GMT

This is correct Stephan K. I will look into flow-redirect with different VRs. Thank you.

Re: Direct VLAN traffic to 2 different firewalls

Stefan_K_ — Thu, 07 Jan 2021 05:21:37 GMT

If you use different VRs you don’t need flow-redirect. You can simply create two default-routes, one for each VR.