Transparent Inline mode - VLAN Question

[speedpill]

Hello Everyone,

I am going to be implementing an HA Juniper IPS appiiance using inline Transparent mode.

This is my diagram..

                         SWITCH 1   -----------------  SWITCH 2

                               |                                    |

                               |                                    |

                               |                                    |

                               |                                    |

                          Juniper IPS                    Juniper IPS

                                |                                   |

                                |                                   |

                                |                                   |

                                |                                   |

------------------------------------------------------------------

|                                                                                      |

|                         CISCO SWITCH                                |---------------------Standby CISCO SWITCH

|                                                                                      |                                        |

------------------------------------------------------------------                                SERVER FARMS

                                          |

                              SERVER FARMS

If there are multiple vlans on the switch connecting to the server farms, then the interface connecting the Juniper IPS to the CISCO SWITCH, will be like a mirrored port getting packets from all vlans in all interfaces. Otherwise how else will the IPS get packets from all the servers?

Thanks

[aweck]

Traffic will be controled by spanning tree on the switches.  The switches should just act they are directly connected with no IDP's in-between, forwarding layer-2 packets per their broadcast domain & repsective CAM tables.

[DaveS]

I have the exact same set up as your diagram with Cisco switch;s. I had a lot of spanning tree issues at first.. I built a etherchannell between the switch's and that resolved all it.

[speedpill]

Hello Dave,

Could you tell me how you made the etherchannel between the switches? How did that stop all your spanning tree issues?

A quick response would be greatly appreciated.

Thanks