topic Re: VLAN sub-interface Unassignable during FTD Container Creation in Network Security

VLAN sub-interface Unassignable during FTD Container Creation

dbotelhosybistech — Wed, 19 Jan 2022 14:28:21 GMT

According to this document regarding Clustering: Deploying a Cluster for Firepower Threat Defense on the Firepower 4100/9300 - Cisco

Deploying a Cluster for Firepower Threat Defense on the Firepower 4100/9300 - Cisco

When you deploy a cluster on the Firepower 4100/ 9300 chassis, it does the following: . For native instance clustering: Creates a cluster-control link (by default, port-channel 48) for unit-to-unit communication. For multi-instance clustering: You should pre-configure subinterfaces on one or more cluster-type EtherChannels; each instance needs its own cluster control link.

www.cisco.com



FXOS: Configure Interfaces. Configure one management and all data interfaces that you intend to assign to the FTD. The cluster interface is defined by default as Port-Channel 48, but for inter-chassis clustering, you need to add member interfaces. For multi-instance clustering, you can add VLAN sub-interfaces to the cluster EtherChannel as well.

Inter-Chassis Clustering

Firepower 4115 Appliance FXOS 2.9

FMC 1600 FMC 7.0

Problem: When creating FXOS Firepower container Instance, the created instance does not show the PortChannel or the created VLAN sub-interfaces to assign to the created instance.

How do I assign vlan sub-interfaces?

Re: VLAN sub-interface Unassignable during FTD Container Creation

Marvin Rhoads — Wed, 19 Jan 2022 14:50:28 GMT

You create the portchannel in Firepower Chassis Manager (or fxos cli) and then assign it to the logical device(s) - whether or not they are in containers or standalone.

Once you have that done you create subinterfaces for the assigned portchannels on FMC under device management interface configuration, add interface.

By the way... if you run 7.0+ on your FTD devices you need to have fxos 2.10+.

https://www.cisco.com/c/en/us/td/docs/security/firepower/compatibility/firepower-compatibility.html#reference_6DF211D8F60F423387D0316000333539

Re: VLAN sub-interface Unassignable during FTD Container Creation

dbotelhosybistech — Wed, 19 Jan 2022 15:05:13 GMT

Thanks so much for the quick and complete answer. I appreciate it.