topic Re: Firepower NGFW 2110 two Trunk/sub-interfaces to core switch? in Network Security

Firepower NGFW 2110 two Trunk/sub-interfaces to core switch?

dan hale — Fri, 21 Feb 2020 15:34:33 GMT

Hi All, I'm replacing a legacy Cisco 3825 ISR that was doing are internal routing and firewall with a Cisco NGFW 2110 using FTD version 6.2.2. at a branch location.

It's basically firewall/router on a stick and I have only two Layer 2 2960-X access switches that are stacked together that it would connect to.

My question is it possible to create two trunk ports/sub-interfaces on the 2110 and have one port on the 2110 go to one switch and another port go to the second switch?

This way if one switch dies I still will be connected to the second switch from the 2110? I would assume that if this is possible that spanning-tree on the 2960-x switches would block one of the uplinks to the 2110.

Thanks,

Dan

Re: Firepower NGFW 2110 two Trunk/sub-interfaces to core switch?

Francesco Molino — Thu, 29 Mar 2018 03:33:39 GMT

Take a look here is explained.

The answer is yes. You need to configure redundant interfaces, deploy the config and then create sub interfaces on this new logical interface generated after redundant config is deployed.

Re: Firepower NGFW 2110 two Trunk/sub-interfaces to core switch?

dan hale — Thu, 29 Mar 2018 04:30:43 GMT

Perfect...thanks!

Re: Firepower NGFW 2110 two Trunk/sub-interfaces to core switch?

Francesco Molino — Thu, 29 Mar 2018 13:03:57 GMT

You're welcome

Re: Firepower NGFW 2110 two Trunk/sub-interfaces to core switch?

dan hale — Thu, 29 Mar 2018 18:37:15 GMT

An update on this...looks like the 2100,4100, and 9300 do not support redundant interfaces in FTD mode.

"• Redundant interfaces are not supported on the Firepower 2100, Firepower 4100/9300 chassis"

https://www.cisco.com/c/en/us/td/docs/security/firepower/621/configuration/guide/fpmc-config-guide-v621/interfaces_for_firepower_threat_defense.pdf

I imagine if they were in ASA mode they would.

Thanks,

Dan

Re: Firepower NGFW 2110 two Trunk/sub-interfaces to core switch?

Francesco Molino — Thu, 29 Mar 2018 18:49:18 GMT

Ok my bad, that's why we post the doc to be sure. Redundant interfaces I used them with ASA converted into FTD but never used and didn't get the use case to use them on bigger customer going to FP hardware.

Re: Firepower NGFW 2110 two Trunk/sub-interfaces to core switch?

samuelmaoza80081 — Tue, 07 Sep 2021 14:12:51 GMT

Hie Guys am trying to configure my 2110 firepower ethernet ports as trunk ports but i do not know where to start? any luck

Re: Firepower NGFW 2110 two Trunk/sub-interfaces to core switch?

Milos_Jovanovic — Wed, 08 Sep 2021 07:00:59 GMT

Hi @samuelmaoza80081,

You can find relenvant information in the config guide.

BR,

Milos