Cluster interfaces

For a cluster isolated to security modules within one Firepower 9300 chassis, you can assign either physical interfaces or EtherChannels (also known as port channels) to the cluster. The assigned interfaces are Spanned interfaces that load-balance traffic across all cluster members.

For clustering with multiple chassis, you can only assign data EtherChannels to the cluster. These Spanned EtherChannels include the same member interfaces on each chassis. On the upstream switch, all these interfaces are part of a single EtherChannel, so the switch does not recognize that it is connected to multiple devices.

You can use regular firewall interfaces or IPS-only interfaces (inline sets or passive interfaces).

Individual interfaces are not supported except for a management interface.