Enterprise campus network with Palo Alto PA-5200 Series firewall protecting DMZ and intranet zones, dual H3C S6520 core switches providing redundancy and VLAN segmentation across management, user access, web, and database tiers. Traffic flows from ISP broadband through the firewall to core switches, then distributes via L3 aggregation switches to access layer devices serving PCs, wireless APs, and application servers. This three-tier architecture with redundant core-to-distribution links ensures high availability and fault tolerance for mission-critical campus operations. Fork and customize this diagram on Diagrams.so to match your organization's switch models, VLAN assignments, and security policies. The design demonstrates best practices for separating trust zones, implementing load balancing with WAF protection, and maintaining network resilience through dual-path routing.