Using Devices In A Stacked Configuration - Cisco AMP8050 Hardware Installation

Using Devices in a Stacked Configuration

Using Devices in a Stacked Configuration
You can increase the amount of traffic inspected on network segments by combining the resources of
identically configured devices in a stacked configuration. One device is designated as the primary device
and is connected to the network segments. All other devices are designated secondary devices, and are
used to provide additional resources to the primary device. A Firepower Management Center creates,
edits, and manages the stacked configuration.
The primary device contains sensing interfaces and one set of stacking interfaces for each secondary
device connected to it. You connect the sensing interfaces on the primary device to the network segments
you want to monitor in the same way as a non-stacked device. You connect the stacking interfaces on the
primary device to the stacking interfaces on the secondary devices using the stacking cables. Each
secondary device is connected directly to the primary device using the stacking interfaces. If a secondary
device contains sensing interfaces, they are not used.
You can stack devices in the following configurations:
•
•
•
•
•
•
•
•
•
For the Firepower 8260 and 8270 devices and Firepower or AMP 8360 and 8370 devices, you can stack
additional devices for a total of four devices in the stack.
One device is designated as the primary device and is displayed on the Firepower Management Center's
web interface with the primary role. All other devices in the stacked configuration are secondary and
displayed in the web interface with the secondary role. You use the combined resources as a single entity
except when viewing information from the stacked devices.
Connect the primary device to the network segments you want to analyze in the same way that you would
connect a single Firepower 8140, Firepower 8250, and Firepower or AMP 8350. Connect the secondary
devices to the primary device as indicated in the stack cabling diagram.
You
Caution
devices as single devices, stack them, and never remove or disable the management interfaces for stacked
secondary devices. This allows each stack member to report health and exchange configuration
information.
After the devices are physically connected to the network segments and to each other, use a Firepower
Management Center to establish and manage the stack.
The following sections provide more information on how to connect and manage stacked devices:
•
•
•
Firepower 8000 Series Hardware Installation Guide
3-10
two Firepower 8140s
up to four Firepower 8250s
a Firepower 8260 (a 10G-capable primary device and a secondary device)
a Firepower 8270 (a 40G-capable primary device and two secondary devices)
a Firepower 8290 (a 40G-capable primary device and three secondary devices)
up to four Firepower or AMP 8350s
a Firepower or AMP 8360 (a 40G-capable primary device and a secondary device)
a Firepower or AMP 8370 (a 40G-capable primary device and two secondary devices)
a Firepower or AMP 8390 (a 40G-capable primary device and three secondary devices)
have management interfaces configured and working for all device stack members. Register all
must
Connecting the Firepower 8140, page 3-11
Connecting the Firepower 82xx Family and Firepower and AMP 83xx Family, page 3-11
Using the 8000 Series Stacking Cable, page 3-14
Chapter 3 Installing a Firepower 8000 Series Device