Blocking traffic on HSRP inter face in standby.

thefranmaneds · ‎02-26-2008

Say you have an router with stateful firewall .2 and a 3560 with .3. The standby address is .1. You use the router as the active state and the 3560 in standby. Is there a way to make so 3560 will not route any traffic if say someone configured their gateway to point to it? The goal is to have all the traffic go through the router/firewall unless it has failed then it will use the 3560 for local inter vlan traffic.

thanks

Joseph W. Doherty · ‎02-26-2008

Depending on how you're routing, perhaps you could make the 3560 see the best path as through the firewall router while it's up. I.e., someone could still set the 3560 as the gateway, but their traffic would still transit the firewall if the firewall was on-line.