https://community.extremenetworks.com/t5/extremeswitching-exos-switch/2-hsrp-router-with-single-handoff-to-2-active-passive-ha/m-p/119341#M23051 <P>Hello everyone,</P><P>First of all, thank you for your time and response.</P><P>We have 2 ISP managed circuit routers with HSRP monitoring WAN links and VIP as gateway for the ingress traffic. We forward all the traffic to VIP. We have 1 handoff from each of the routers. We also have 2 Palo-alto firewall running in active-passive state.</P><P>Currently to make the configuration work, we have a Extreme switch sitting in the between of router and firewalls and connecting 2 handoff from router and 2 links to the firewall, creating a single point of failure.</P><P><SPAN>This switch actually has a peer switch with MLAG configuration, but we are unable to come up with a way, where we can have it redundant over both the switches. I have attached diagram of the same.</SPAN></P><P><SPAN><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="vsspatel_0-1753129847532.png" style="width: 400px;"><img src="https://community.extremenetworks.com/t5/image/serverpage/image-id/8899i672569FAD4A762F4/image-size/medium?v=v2&amp;px=400" role="button" title="vsspatel_0-1753129847532.png" alt="vsspatel_0-1753129847532.png" /></span></SPAN></P><P><STRONG>Is there a way to remove this single point of failure?</STRONG></P><P>Thank you!</P> Mon, 21 Jul 2025 20:31:07 GMT vsspatel 2025-07-21T20:31:07Z https://community.extremenetworks.com/t5/extremeswitching-exos-switch/2-hsrp-router-with-single-handoff-to-2-active-passive-ha/m-p/119341#M23051 <P>Hello everyone,</P><P>First of all, thank you for your time and response.</P><P>We have 2 ISP managed circuit routers with HSRP monitoring WAN links and VIP as gateway for the ingress traffic. We forward all the traffic to VIP. We have 1 handoff from each of the routers. We also have 2 Palo-alto firewall running in active-passive state.</P><P>Currently to make the configuration work, we have a Extreme switch sitting in the between of router and firewalls and connecting 2 handoff from router and 2 links to the firewall, creating a single point of failure.</P><P><SPAN>This switch actually has a peer switch with MLAG configuration, but we are unable to come up with a way, where we can have it redundant over both the switches. I have attached diagram of the same.</SPAN></P><P><SPAN><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="vsspatel_0-1753129847532.png" style="width: 400px;"><img src="https://community.extremenetworks.com/t5/image/serverpage/image-id/8899i672569FAD4A762F4/image-size/medium?v=v2&amp;px=400" role="button" title="vsspatel_0-1753129847532.png" alt="vsspatel_0-1753129847532.png" /></span></SPAN></P><P><STRONG>Is there a way to remove this single point of failure?</STRONG></P><P>Thank you!</P> Mon, 21 Jul 2025 20:31:07 GMT https://community.extremenetworks.com/t5/extremeswitching-exos-switch/2-hsrp-router-with-single-handoff-to-2-active-passive-ha/m-p/119341#M23051 vsspatel 2025-07-21T20:31:07Z