stack from two switches and HA firepower 1140

[kapydan88]

Hello for everybody.

We are going to install two firepower 1140 in HA, by first connecting each of them to a stack of two switches through port channel. 

Is it possible to do this in this sequence:

1) Each of the devices is connected via mgmt port to the FMC.

2) On each of the devices, etherchannel is configured via FMC to the stack of switches - one link goes to one switch, the other to the second switch. On this stage, etherchannel on each device is not divided into subinterfaces.

3) Both devices firepower 1140 are configured in HA.

4) At the last stage, subinterfaces are configured on HA.

Is this the correct order of action or not?

[Marvin Rhoads · Accepted solution]

Do step #3 ("Both devices firepower 1140 are configured in HA.") second.

Once they are in HA, all of the (non-management) interface configuration changes made in FMC and deployed to the devices will replicate between them.

[kapydan88]

If I understand correctly operational procedure should be next 1 - 3 - 4. 

Both devices must be taken "out of the boxes", connected the same way (two links to each switch) and configure in HA. Then configure the etherchannel and subinterfaces on HA.