Forum Discussion

chris_connell_1's avatar
chris_connell_1
Icon for Nimbostratus rankNimbostratus
Aug 17, 2011

Design question regarding layer3/layer2

  Hello   We have a current design like this (sorry for the basic diagram)     firewall1 ----> layer2switch------router1 (running hsrp)   || ...
config
design
JRahm's avatar
JRahm
Icon for Admin rankAdmin
Aug 24, 2011
why not plug the firewalls directly into the layer2switches? You can enable stp in the specific vlan, but I prefer to keep l2 functions on the dedicated infrastructure and let BIG-IP do what it does best.