Skip to main content

02 · Classic three-tier

HA firewalls → core aggregation → top-of-rack

North–SouthEast–WestAir-gap / at-riskPeer / HA linkFabric mesh HA CLUSTER · GATEWAY FIREWALLSFW1activeFW2standbyStatic default route · 0.0.0.0/0CORE ROUTERS / AGGREGATE SWITCHES · ACTIVE/ACTIVECore Switch 1Core Switch 2HA PairTOR 1A/1BTOR 2A/2BTOR 3A/3BSERVER RACKS WITH TOR SWITCHES · DUAL UPLINKS

Key properties​

  • Active / active HA pair — Core 1 and Core 2 both carry north–south and east–west traffic; either switch survives alone.
  • Shared gateway (VRRP/HSRP), no role split between them.
  • Inter-rack (east–west) traffic & intranet: VLAN trunking / L2 extensions.
  • Dual uplinks: every TOR pair homes to both cores.