Is it possible to implement the below topology? I see that there is a port channel going downstream to the firewalls. By any chance, are the firewalls running as one virtual entity? As we see here are 2 different downstream firewalls, and we cannot run the portchannel.
So if we cluster the FW01 and FW02 as a single entity and run the port channel in no LACP suspend mode, does that possibility exist?
Note:SW01 and SW02 are N5k
Peer KA link denotes peer keepalive link.
Peer link denotes vpc peer link.