Spine and leaf Switch connection

Question

Hi everyone,

I have 2 pairs of switches.

On the first pair (2x S4112F) terminate the VRRP connections from our internet provider. Port 1 on both switches. On port 2 on both switches are connected to the firewalls WAN interface. Port 1 and 2 are in the same VLAN. Port 3 is used to connect the LAN port of the firewall.

Now I have to connect the two switches to our second switch pair.

Two S5232F connected via VLTi. From these switches all servers are connected.

Each VLAN terminates at the firewall. So switches do not do any routing. How should I connect the first switch pair to the second switch pair?

Best regards

AINDER

bealdrid2 · Accepted Answer

Can you not just connect the firewall LAN port(s) to the S5232F pair instead? E.g. something like:

Internet ---> 4112F ---> Firewall (WAN) . Then you'd have Firewall (LAN) ---> S5232F ---> Servers.

In this way, you wouldn't even have the two pairs directly connected. This also minimizes the chances for Layer 2 STP issues,.etc.

Dell-DylanJ · Answer

Specific configuration recommendations aren't something I'd feel comfortable making, so I'll leave that piece for the community (Dell also offers network consultation services, if you're interested).

I can however make sure you have your switch resources. You can find the relevant manuals for the switch and OS on this page: https://dell.to/3coe0N2

Networking General

Spine and leaf Switch connection

Was this post helpful?