Hijexx wrote:
] Question is this: How can you cross connect, for example, the
] external switches so that ExSwitchA touches both FWA & B, and
] ExSwitchB touches both firewalls as well? Reason being if
] ExSwitchA fails, you still want B to throw packets at both
] firewalls.
]
] I'm cooking up a few things in my mind but it gets ugly at
] layer 3. Assume that the firewalls cannot aggregate their
] links. Assume the clustering solution is a multicast software
] load balance solution. Assume OSPF is available.
]

I'm confused by your question. By aggregate links, do you mean it cannot bond ports/channels? If you are connecting up the firewalls to both switches on either side, that's the function you would want.

The following link is to a page from the Guide to IP Layer Network Administration with Linux that details the specifics for that platform. I'm not sure what the procedure would be with other platforms.