Sophos XGS 126 - highest network speed

Hello John,

Greeting!

I believe setting up Layer 3 LAG would help here:

https://support.sophos.com/support/s/article/KB-000037178?language=en_US

docs.sophos.com/.../index.html

Dear Mayur,

You mean removing the layer 2 aggregation switches. In that case it will work. However all SFP+ ports will be occupied* and there are no expansion possibilities. However in case expansion is required two Layer 3 aggregation switches can be added to the set-up.

*planning to do cabling using fiber optics

The architecture diagram will be:

---

John

Hello John,

I believe having Layer 3 aggregation for better throughput. Kindly review the tech sheet, it does have an option expansion slot if that helps:

https://www.sophos.com/en-us/medialibrary/pdfs/factsheets/sophos-firewall-br.pdf

Hey John245 ,

Just for your understanding, the differences between the layer 2, layer2+3 and layer3+4:

> layer2
# Generate the hash value using MAC addresses. This algorithm will place all traffic to a particular network peer on the same slave and is 802.3ad compliant.

> layer2+3
# Generate the hash value using a combination of layer 2 (MAC address) and layer 3 (IP address) protocol information. This policy is intended to provide a more balanced distribution of traffic than layer2 alone, especially in environments where a layer3 gateway device is required to reach most destinations. Again is 802.3ad compliant.

> layer3+4
# Generate the hash value using transport layer protocol information. This allows for traffic to a particular network peer to span multiple slaves, although a single connection will not span multiple slaves. Not fully LACP or 802.3ad compliant, may create unordered packets traffic.

Dear Vivek,

I understood in the past:

Layer 2 traffic will be routed through the router (Will limit 10 GbE traffic to 1 GbE as XGS supports 1GbE)

Layer 3 traffic will be not be routed through the router (will eliminate the 1 GbE throughput  limitation of the XGS 126, ofcourse also no inspection).

Can you confirm that in case of the use of aggregation switches (original architecture) these should also be L3 to het 10 Gbps throughput?

---

John

Yes and again as MayurMakvana  suggested Layer 3 aggregation will have a better throughput.

Hello John,

Adding to what has been said in this thread, I would highly recommend you to reach out to your Sales Engineer/Professional Services for this type of question and implementation, as they’re the best resource when setting up your network.

Regards,