topic Re: Layer 1 Cabling for FTD 4150 Hardware Cabling in HA Cluster in Network Security

Layer 1 Cabling for FTD 4150 Hardware Cabling in HA Cluster

johnmike — Fri, 21 Feb 2020 17:52:58 GMT

I have two hardware 4150 FTD firewalls configured in a logical cluster...I have been trying to find a configuration guide that shows how an HA Cluster is properly configured and also shows the correct physical cabling of the required port connections to properly configure an HA Cluster. Appreciate any recommendations/feedback

Re: Layer 1 Cabling for FTD 4150 Hardware Cabling in HA Cluster

Pedro Narciso — Fri, 31 Jan 2020 09:17:29 GMT

Hello,

Have a look at this guide and see if it helps with your question: https://www.cisco.com/c/en/us/td/docs/security/firepower/fxos/clustering/asa-cluster-solution.html#id_78596

Re: Layer 1 Cabling for FTD 4150 Hardware Cabling in HA Cluster

Akin Utku — Tue, 10 Mar 2020 10:24:58 GMT

I have found contradicting statements on whether or not you can cable the CCL (Cluster Control Link) back-to-back and not much detail out there for it. I did find a pretty good powerpoint that covers how to cluster for ASA's and I believe the FTD's will be similar. Check this out:

https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2016/pdf/BRKSEC-3032.pdf

I'm also doing research around whether or not spanned ether-channel is supported for the CCL, I have a client that wants to cluster 4x 4100's in 2 DC's with 1 VSS member on each site. I want to avoid using OTV and manual MAC filtering etc, it's been pretty difficult to find any extensive documentation around how to set up the CCL and what the caveats and gotchas are. Good luck!