Redundant links on Firepower 1120

[sasha]

Hello. Does Firepower 1120 support link aggregation (e.g. LACP)? Does it support LAG with ASA software, or it must run FTD?

Does Firepower 1120 support spanning tree, e.g. RSTP?

Does Firepower 1120 support dynamic IPv4 routing (e.g. RIP, OSPF...)?

If not, which Firepower models support LAG, STP and/or dynamic routing?

Thanks a lot!

[Marvin Rhoads · Accepted solution]

1. Yes. With either ASA or FTD image.

https://www.cisco.com/c/en/us/td/docs/security/firepower/70/configuration/guide/fpmc-config-guide-v70/regular_firewall_interfaces_for_firepower_threat_defense.html#id_90517

2. No. That is a switching protocol and the 1120 does not support switch ports. Even the 1010 (which does support switch ports) does not support spanning tree.

https://www.cisco.com/c/en/us/td/docs/security/firepower/70/configuration/guide/fpmc-config-guide-v70/regular_firewall_interfaces_for_firepower_threat_defense.html#task_rzl_bfc_b3b

3. Yes.

https://www.cisco.com/c/en/us/td/docs/security/firepower/70/configuration/guide/fpmc-config-guide-v70/routing_overview_for_firepower_threat_defense.html#ID-2101-00000062