Layer 1 Cabling for FTD 4150 Hardware Cabling in HA Cluster

[johnmike]

I have two hardware 4150 FTD firewalls configured in a logical cluster...I have been trying to find a configuration guide that shows how an HA Cluster is properly configured and also shows the correct physical cabling of the required port connections to properly configure an HA Cluster. Appreciate any recommendations/feedback

[Pedro Narciso]

Hello,

Have a look at this guide and see if it helps with your question: https://www.cisco.com/c/en/us/td/docs/security/firepower/fxos/clustering/asa-cluster-solution.html#id_78596

[Akin Utku]

I have found contradicting statements on whether or not you can cable the CCL (Cluster Control Link) back-to-back and not much detail out there for it.  I did find a pretty good powerpoint that covers how to cluster for ASA's and I believe the FTD's will be similar.  Check this out: 

https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2016/pdf/BRKSEC-3032.pdf

I'm also doing research around whether or not spanned ether-channel is supported for the CCL, I have a client that wants to cluster 4x 4100's in 2 DC's with 1 VSS member on each site.  I want to avoid using OTV and manual MAC filtering etc, it's been pretty difficult to find any extensive documentation around how to set up the CCL and what the caveats and gotchas are.  Good luck!