Can you not just connect the firewall LAN port(s) to the S5232F pair instead?  E.g. something like:Internet ---> 4112F ---> Firewall (WAN) .  Then you'd have Firewall (LAN) ---> S5232F ---> Servers. In this way, you wouldn't even have the two pairs directly connected.  This also minimizes the chances for Layer 2 STP issues,.etc.
Hi everyone, I have 2 pairs of switches. On the first pair (2x S4112F) terminate the VRRP connections from our internet provider. Port 1 on both switches. On port 2 on both switches are connected to the firewalls WAN interface. Port 1 and 2 are in the same VLAN. Port 3 is used to connect the LAN port of the firewall. Now I have to connect the two switches to our second switch pair. Two S5232F connected via VLTi. From these switches all servers are connected. Each VLAN terminates at the firewall. So switches do not do any routing. How should I connect the first switch pair to the second switch pair?   Best regards  AINDER
Spine and leaf Switch connection