08-25-2023 07:59 AM - edited 08-25-2023 07:59 AM
Been looking at BRKSEC-2020 slides on FTD EtherChannel to VSS...
I normally use a L3 transit between an inside router and a firewall, but as far as I can determine, with 3110s connecting to a VSS core using MCEC, I would not have that option because the VSS side requires two port-channel interfaces which in turn would require each to have a unique IP address.
Did I miss something, or is trunking with subinterfaces the only option between FTD and VSS switches?
08-25-2023 09:08 AM
If L3 is the requirement not L2 - then PO with Sub-interface should work for you.
08-30-2023 03:30 PM
@balaji.bandi thanks for taking time to answer. I only needed a L3 transit network and was able to assign an ip address to the etherchannel interface on the 3110 side, so no subinterface needed or configured.
09-01-2023 09:41 AM
then that is good to go as per your requirement for L3
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide