[Bridge] Linux Firewall with STP

[Bridge] Linux Firewall with STP

[Claudio Prono]

Hello all,

I don't have a big experience with stp protocol, so i need some help on
configuration.

My scenario is the following:

I have one (ore more) system behind two redundat switches. The system
have 2 ethernet cards, so it is connected with the two switches, and the
switches are connected each other. connected to the two switches there
is a linux firewall, with 3 ethernet cards. Two are connected to the
switches, the last one is connected to the internet router.

There is my questions:

- The system behind the two redundant switches must have 2 IP Address?
One for each card?
- The Firewall must have 2 "Internal" IP addresses? And if yes, how i
can NAT this to an external address?

Anyone have experence in scenarios like this and can help me for a
correct configuration?

Any type of help is well accepted.

Thanks,

Claudio Prono.

-- 
--------------------------------------------------------------------------------
Claudio Prono                         OPST
System Developer               
                                      Gsm: +39-349-54.33.258
@PSS Srl                              Tel: +39-011-32.72.100
Via San Bernardino, 17                Fax: +39-011-32.46.497
10141 Torino - ITALY                  http://atpss.net/disclaimer
--------------------------------------------------------------------------------
PGP Key - http://keys.atpss.net/c_prono.asc

Re: [Bridge] Linux Firewall with STP

[Nicolas de Pesloüan]

Le 18/01/2011 11:27, Claudio Prono a écrit :
> Hello all,
>
> I don't have a big experience with stp protocol, so i need some help on
> configuration.
>
> My scenario is the following:
>
> I have one (ore more) system behind two redundat switches. The system
> have 2 ethernet cards, so it is connected with the two switches, and the
> switches are connected each other. connected to the two switches there
> is a linux firewall, with 3 ethernet cards. Two are connected to the
> switches, the last one is connected to the internet router.
>
> There is my questions:
>
> - The system behind the two redundant switches must have 2 IP Address?
> One for each card?
> - The Firewall must have 2 "Internal" IP addresses? And if yes, how i
> can NAT this to an external address?
>
> Anyone have experence in scenarios like this and can help me for a
> correct configuration?
>
> Any type of help is well accepted.

Hi,

You should try to use the bonding module on the system behind the two redundant switches and on the 
firewall.

Bonding will aggregate two NIC into a single (virtual) one. This virtual NIC will hold the IP 
address. In case of a failure, bonding will automatically use the other path.

HTH

	Nicolas.