topic Re: Creating Sub-Interface on Port-Channel in FTD HA (Multi-Instance) in Network Security

Creating Sub-Interface on Port-Channel in FTD HA (Multi-Instance)

muhammad-nouman — Tue, 13 May 2025 13:24:52 GMT

We have a setup with two FTDs running in High Availability (HA) on separate Firepower chassis in a Multi-Instance environment. I'm trying to create a new sub-interface on a port-channel from FMC, but the interface is not appearing in the FMC UI.

A couple of questions I need help with:

Do I need to create the sub-interface from the Firepower Chassis Manager (FCM) first?
If yes, do I need to create the sub-interface on both chassis and then assign it to the FTDs separately?
Will creating and assigning the sub-interface cause any disruption to the existing traffic or HA state?

Any guidance or best practices would be greatly appreciated.

Re: Creating Sub-Interface on Port-Channel in FTD HA (Multi-Instance)

nspasov — Tue, 13 May 2025 15:58:53 GMT

What is the appliance model and version of code that you are using?

Re: Creating Sub-Interface on Port-Channel in FTD HA (Multi-Instance)

muhammad-nouman — Tue, 13 May 2025 21:04:03 GMT

Appliance: FPR-4115

FXOS Software: 2.10(1.207)

FTD Software 7.0.1

Re: Creating Sub-Interface on Port-Channel in FTD HA (Multi-Instance)

nspasov — Wed, 14 May 2025 19:58:00 GMT

I believe the information that you are looking for can be obtained here.

Thank you for rating helpful posts!