Layer 3 Switch Redundancy Configuration

[ciscolog]

Hi All,

1. What else would be the best practice in this topology?

2. I will add a default route from the layer 3 switches to the firewall's shared lan ip address, but I can't figure out how to route from the firewall to the two vrrp virtual ip's on layer 3.

3. Should the connection between the two layer 3 switches be etherchannel or will there be some other configuration here?

Thanks,

Best Regards,