The Question: What is the proper configuration for the L3 switch to be allowed to assign public IPs for the firewalls?
I guess All I need is that the switch L3 act as a layer 2 switch…Right?
Update
1- The Same ISP provides two public subnets /29 ( wan 1 and wan 2)
2- SFP connectors are connected to Cisco 3650
3- The Firewalls are Fortigate and they are working as Routers (NAT Mode).
I just need to know:
-
what is the ports configuration on the layer 3 switch that will be connected to the ISP?
-
what is the ports configuration on the layer 3 switch that will be connected to the Firewalls? Or any device will be connected directly to the L3 switch to have a public IP?
Best Answer
Generally, you'd want to avoid plugging a switch directly into the ISP (even a layer 3) but if your Fortigate is acting as a router, you can use the switch by doing the following:
Assign it one of the IP's from your ISP. Switch your links to trunk link connecting to the router, and access links to the end users. Set your default gateway (including your gateway of last resort back to the ISP) and you should have a bare bones network.
You can spread out and run VLANs, but I would start with it as easy as possible, make sure it works, then add customization one piece at a time.