topic Re: Firepower Cluster Control Link in Network Security

Firepower Cluster Control Link

dvalinho — Fri, 21 Feb 2020 17:48:00 GMT

Hello Experts,

Could you please tell the advantage of using Spanned Etherchannel over Device local etherchannel?

What are the benefits of one over the other?

Thanks

Re: Firepower Cluster Control Link

Muhammad Awais Khan — Mon, 30 Dec 2019 03:37:11 GMT

Hi,

In order to achieve true scalability in addition to high availability, then spanned ether channels across multiple FTD's/ASAs should be used instead of device local or individual ether channel. it creates true active/active scenario where both or multiple firewalls will participate in traffic forwarding and at the same time providing high availability.

reference: https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2016/pdf/BRKSEC-3032.pdf

Re: Firepower Cluster Control Link

Akin Utku — Tue, 10 Mar 2020 03:25:37 GMT

Is there any additional documentation around clustering the FTD's? Not the ASA?

Re: Firepower Cluster Control Link

Muhammad Awais Khan — Tue, 10 Mar 2020 04:07:33 GMT

you can refer to below configuraiton guide also:

https://www.cisco.com/c/en/us/td/docs/security/firepower/650/configuration/guide/fpmc-config-guide-v65/clustering_for_the_firepower_threat_defense.html