https://community.extremenetworks.com/t5/extremeswitching-exos-switch/two-tier-mlag-router-redundancy/m-p/92436#M21451 <P>Hi there!<BR /><BR />For one of my customers I implemented Two-Tier MLAG on four X460-G2 switches based on the KB article: <A href="https://extremeportal.force.com/ExtrArticleDetail?an=000082635" target="_blank" rel="nofollow noreferrer noopener">https://extremeportal.force.com/ExtrArticleDetail?an=000082635</A><BR />Here is my diagram:</P><P><span class="lia-inline-image-display-wrapper" image-alt="785789c4da274147a30956598a7e1af4_9276f934-cd74-4114-8a7e-32eb405fde1c.png"><img src="https://community.extremenetworks.com/t5/image/serverpage/image-id/2436iA49F10E8FA3A1502/image-size/large?v=v2&amp;px=999" role="button" title="785789c4da274147a30956598a7e1af4_9276f934-cd74-4114-8a7e-32eb405fde1c.png" alt="785789c4da274147a30956598a7e1af4_9276f934-cd74-4114-8a7e-32eb405fde1c.png" /></span></P><P>&nbsp;</P><P><BR />MLAG between all switches works like a charm, but I have doubts about how to connect two firewalls (those two onthe top) to my Data Center mesh...<BR /><BR />What would be Your sugestion about implementation of two Palo Alto firewalls to provide the maximum redundancy? Both Palo Alto firewalls are running in Active-Pasive HA.<BR /><BR /><BR />With regards,<BR />Konrad</P><P>&nbsp;</P> Fri, 12 Apr 2019 17:12:02 GMT Konrad_PL 2019-04-12T17:12:02Z https://community.extremenetworks.com/t5/extremeswitching-exos-switch/two-tier-mlag-router-redundancy/m-p/92436#M21451 <P>Hi there!<BR /><BR />For one of my customers I implemented Two-Tier MLAG on four X460-G2 switches based on the KB article: <A href="https://extremeportal.force.com/ExtrArticleDetail?an=000082635" target="_blank" rel="nofollow noreferrer noopener">https://extremeportal.force.com/ExtrArticleDetail?an=000082635</A><BR />Here is my diagram:</P><P><span class="lia-inline-image-display-wrapper" image-alt="785789c4da274147a30956598a7e1af4_9276f934-cd74-4114-8a7e-32eb405fde1c.png"><img src="https://community.extremenetworks.com/t5/image/serverpage/image-id/2436iA49F10E8FA3A1502/image-size/large?v=v2&amp;px=999" role="button" title="785789c4da274147a30956598a7e1af4_9276f934-cd74-4114-8a7e-32eb405fde1c.png" alt="785789c4da274147a30956598a7e1af4_9276f934-cd74-4114-8a7e-32eb405fde1c.png" /></span></P><P>&nbsp;</P><P><BR />MLAG between all switches works like a charm, but I have doubts about how to connect two firewalls (those two onthe top) to my Data Center mesh...<BR /><BR />What would be Your sugestion about implementation of two Palo Alto firewalls to provide the maximum redundancy? Both Palo Alto firewalls are running in Active-Pasive HA.<BR /><BR /><BR />With regards,<BR />Konrad</P><P>&nbsp;</P> Fri, 12 Apr 2019 17:12:02 GMT https://community.extremenetworks.com/t5/extremeswitching-exos-switch/two-tier-mlag-router-redundancy/m-p/92436#M21451 Konrad_PL 2019-04-12T17:12:02Z https://community.extremenetworks.com/t5/extremeswitching-exos-switch/two-tier-mlag-router-redundancy/m-p/92437#M21452 If the Firewall is LACP capable than I would suggest to connect each with MLAG to the two switches at the local data centre.<BR /> If one switch fails than nothing happens to the firewall connection. If one data centre fails than the HA peer of the Firewall should take over. Fri, 12 Apr 2019 22:08:15 GMT https://community.extremenetworks.com/t5/extremeswitching-exos-switch/two-tier-mlag-router-redundancy/m-p/92437#M21452 Christoph 2019-04-12T22:08:15Z