Okay, my question is along these same lines, but a bit different. I have two FP2110s running ASA code. In the FXOS GUI, I create a port channel for the outside interface as I want to connect each firewall to each physical switch in a pair of Catalyst 6807-XL systems running in VSS mode. I am able to create and stand up a port channel (using static, not LACP or PAgP) in the FXOS GUI with no problem. The upstream switch also shows that the etherchannel is up and functioning. I can see the port channel in the ASA configuration, and the physical interfaces are no longer in the ASA configuration. I am running the firewall set in transparent mode, so I have a bridge interface setup, and the port channel is part of the bridge group. I have no connectivity at all this way. I am using the stand alone FDM to configure FXOS. If I remove the port channel and use the physical interface E1/1 as the outside and E1/2 as the inside, all is working great. How do I get FXOS to allow the ASA software to use the port channel that I have created in FXOS? Update: I was able to get this to work. I found that I had to enable LACP on both the FXOS and the upstream switch for it to actually form the Port Channel in the ASA code. You cannot use non-auto negotiation between a switch and a FP2110 running ASA code.
... View more