WAN ip on 5406r?

[emsc]

Hi,

We have two 5406r switches, in VSF already configured.

One of the 5406r has the WAN cable from our ISP provider.

We currently have our WAN /30 IP in one of our firewall/router (BSD box).

This is a bit of a problem because if one the firewall goes down, that IP is not floating between both firewalls.

So, I was wondering if I can do the WAN part from the 5406r?

I know this is still a SPOF, but everntually we'll try to get multihoming working. 

thanks!

emsc

[Richard Litchfield]

You are always going to have SPOF until you get a second router and link... failing that, if you can get your SP to provide two cables from the router. You could then do several things, eg:

• L3 ECMP from the VSF stack
• smart-tracking of a link (active/standby)
• LACP

I set up a Route Aggregation Group (RAGG) on a 5400R stack to an MSR router for Atmosphere ANZ 2016 in December. It is still effectively an L2 connection, but the MSR treated it like an L3 (don't forget there is no firmware enabling routed ports with the ProVision ASIC).

5405R-VSF config:

trunk 1/A20,2/A20 trk20 lacp
sflow 1 sampling 2/A19,Trk8,Trk20 500
interface 1/A20
   name "Router RAGG"
   exit
interface 2/A20
   name "Router RAGG"
   exit
vlan 930
   name "Show-Servers"
   untagged Trk20
   ip address 10.20.30.1 255.255.255.0
   exit

MSR3012 config:

interface Route-Aggregation1
 description RAGG to core
 ip address 10.20.30.12 255.255.255.0
 link-aggregation mode dynamic
#
interface GigabitEthernet0/1
 port link-mode route
 port link-aggregation group 1
#
interface GigabitEthernet0/2
 port link-mode route
 port link-aggregation group 1
#