L3 MCEC Etherchannel to VSS

[lcaruso]

Been looking at BRKSEC-2020 slides on FTD EtherChannel to VSS...

I normally use a L3 transit between an inside router and a firewall, but as far as I can determine, with 3110s connecting to a VSS core using MCEC, I would not have that option because the VSS side requires two port-channel interfaces which in turn would require each to have a unique IP address.

Did I miss something, or is trunking with subinterfaces the only option between FTD and VSS switches?

[balaji.bandi]

If L3 is the requirement not L2 - then PO with Sub-interface should work for you.

[lcaruso]

@balaji.bandi thanks for taking time to answer. I only needed a L3 transit network and was able to assign an ip address to the etherchannel interface on the 3110 side, so no subinterface needed or configured. 

[balaji.bandi]

then that is good to go as per your requirement for L3