FTD HA Cabling

[benolyndav]

Hi

So FTD HA pair,  presently port-channel from FTD-1 to Switch stack as per attached diagram, is the correct way now to add another port-channel on the Switch Stack for redundancy, so FTD-2 to Switch Stack on seperate Port-channel and make sure all Vlans allowed on both Port-channels.????

Thanks

 

[Rob Ingram · Accepted solution]

Hi,

Cable the 2nd FTD to both switches, on the switch you would configure a second etherchannel, one for each FTD.

Check out figure 2 in this link

https://www.cisco.com/c/en/us/td/docs/security/firepower/650/configuration/guide/fpmc-config-guide-v65/regular_firewall_interfaces_for_firepower_threat_defense.html

HTH

[benolyndav · Accepted solution]

Thanks Rob great advise as always