vsop5207 发表于 2019-9-29 14:05
可以啊,你可以防火墙两个端口捆绑,配置一个IP ,然后堆叠交换机两个端口做channel ,配置一个IP 就可以了 ...
防火墙:
interface Port-channel5
no switchport
ip address 192.168.253.2 255.255.255.248
interface GigabitEthernet0/1
nameif inside1
security-level 100
channel-group 1 mode active
interface GigabitEthernet0/5
nameif inside1
security-level 100
channel-group 1 mode active
核心交换交换机做了堆叠:
interface Port-channel5
no switchport
ip address 192.168.253.4 255.255.255.248
interface GigabitEthernet1/0/48
no switchport
no ip address
channel-group 1 mode active
interface GigabitEthernet2/0/48
no switchport
no ip address
channel-group 1 mode active
核心交换的1/0/48连接防火墙的0/1
核心交换的2/0/48连接防火墙的0/5
这样配置可以吗