topic Re: HA cluster and cisco stack switch in Spark Firewall (SMB)

HA cluster and cisco stack switch

RioAung — Wed, 31 Aug 2022 13:19:17 GMT

Hi ,

I did HA deployment using quantum spark 1590 (Active /Passive)

I aslo run two cisco switches as stack. One uplink cable connect from actvie switch to active firewall and one cable are connected from standby switch to standby firewall. I also configure HA monitoring in those two interface.

So i would like to know those both switch interface should run portfast ( stp disable) ? Should i turn on stp on both ports ?

Should i disable HA monitoring on those two interfaces on firewall.

Re: HA cluster and cisco stack switch

Chris_Atkinson — Wed, 31 Aug 2022 13:57:32 GMT

Typically portfast or portfast edge if trunk but it depends on your LAN side config.

Understand your concern given the built-in switching element of the 1500.

Re: HA cluster and cisco stack switch

RioAung — Wed, 31 Aug 2022 13:34:02 GMT

Hi @Chris_Atkinson

I didn't configure trunk. I use as access port because i use one vlan.if access port ,should be portfast /edge port ?

should i configure trunk ?

Re: HA cluster and cisco stack switch

Chris_Atkinson — Wed, 31 Aug 2022 13:58:08 GMT

If you don't need multiple vlans on the uplink then it's not necessary to configure a trunk.

If you are wary you could use the DMZ port or otherwise ensure the LAN port in question is the only member of that network and remove/unassign the others.

Re: HA cluster and cisco stack switch

the_rock — Wed, 31 Aug 2022 14:02:04 GMT

@Chris_Atkinson is absolutely right, if there wont be multiple VLANS on that uplink, then you dont need a trunk, just access port.