1, a firewall is h3c f100 - m - g, work in transparent mode, it divides the two vlan, vlan100 and vlan101 in vlan100 port 1, 3, 2, 4 in vlan101, 28 core switch port port 1, port 2 core switch port 27, port 3 outside the webmaster with link, port 4 connect outside network backup link,
2, a core switch is h3c s7503e, port belongs to vlan638 27, 28 belongs to vlan538, core switches on ospf,
3, firewall ports 1, 2 in truns domain, 3, 4 in the untruns domain,
4, truns visit untruns strategy for all of the source IP to put through all destination IP, all of the source of the service and all the purpose of service,
5, untruns domain access truns domain strategy ditto,
Question:
After connect by this way, the backup link, disconnect the main using link backup link recovery,
To replace the firewall with a layer 2 switches, the same way after dividing vlan connection, Lord, for link no problem,
Please feel free to comment greatly, thank you very much!