topic Firepower Issue in Network Security

Firepower Issue

Mustapha Bassim — Wed, 02 Nov 2022 08:58:08 GMT

Hello Dears

i have the attched digram with VPC configration only between the two swiches when i reload the master VPC nexus switch there is a downtime about 1 min while this not take place since the firepower devices are confiagred as Active/Standby mode any one can help ?

Bests

Re: Firepower Issue

MHM Cisco World — Wed, 02 Nov 2022 09:07:47 GMT

the both FW as I know need to connect to both NSK SW (running vPC) via Port-channel.

Re: Firepower Issue

Mustapha Bassim — Wed, 02 Nov 2022 09:19:33 GMT

ok dear so it's not apply without doing vPC on switch side ? and also on firewall side we just need to enable LACP ?

Re: Firepower Issue

Sheraz.Salim — Wed, 02 Nov 2022 09:53:32 GMT

what are the Firepower model you using are they 4100 or 9300 seires?

looking into your presentation diagram you only showing 1 link going towards the firewall. where as ideally you should have a port-channel from firewall to Nexus 9K. (and so should Nexus presentation have a VPC configured as you mentioned earlier).

so in summary. You configured VPC on two switches which is good. at the same time the firewall need to be configured in as port channel as LACP. (LACP need to be configured from Nexus to Firewall and from Firewall to Nexus). once this configured if you failover the firewall or either Master VPC/Slave VPC goes does it should not have impact on firewall due to STP fakeing it to be showing as 1 giant link.

Re: Firepower Issue

Mustapha Bassim — Wed, 02 Nov 2022 10:56:46 GMT

Hello Dear and thnx for reply , i have 2130 model i do not now if it's working with vPC or not ?

Re: Firepower Issue

Mustapha Bassim — Wed, 02 Nov 2022 11:18:01 GMT

29 Po29 down* failed vpc port channel -
mis-config due to vpc
links in the 2
switches connected to
different partners

when i configre the vPC we got this error

Re: Firepower Issue

Mustapha Bassim — Fri, 04 Nov 2022 09:55:50 GMT