Hijexx wrote:
] Question is this: How can you cross connect, for example, the
] external switches so that ExSwitchA touches both FWA & B, and
] ExSwitchB touches both firewalls as well? Reason being if
] ExSwitchA fails, you still want B to throw packets at both
] firewalls.
]
] I'm cooking up a few things in my mind but it gets ugly at
] layer 3. Assume that the firewalls cannot aggregate their
] links. Assume the clustering solution is a multicast software
] load balance solution. Assume OSPF is available.
]

I'm confused by your question. By aggregate links, do you mean it cannot bond ports/channels? If you are connecting up the firewalls to both switches on either side, that's the function you would want.

The following link is to a page from the Guide to IP Layer Network Administration with Linux that details the specifics for that platform. I'm not sure what the procedure would be with other platforms.

2.3. Link Aggregation and High Availability with Bonding