Quantcast
Channel: Sophos User Bulletin Board
Viewing all articles
Browse latest Browse all 14361

Fully meshing in redundant astaros

$
0
0
Hi group.

We are currently running our HA setup as follows.

We have 2 routers to the internet, setup as HSRP on both the outside and inside interfaces.

We have 2 astaro 320's configured in Active/Passive.

The astaros connect to the routers via redundant switches.

My question is this. In the unlikely scenario where say switch1 fails and simultaneously firewall2 fails, we would have an outage because firewall1 is directly connected to switch1 which is dead. Firewall1 does not have a connection to switch2.

What would I need to do in order to have firewall1 also connect to swtich2 as well as switch1?

I'm thinking it might have something to do with link aggregation? If so, is it as easy as finding an un-used interface on the astaro, plugging it into the other switch, and choosing "convert interface: external" ?

Viewing all articles
Browse latest Browse all 14361

Trending Articles