A data center FTD is getting a new outside uplink: four 10 Gbps links to a top-of-rack switch that the network team already configured for LACP. The uplink must deliver up to 40 Gbps of aggregate capacity across traffic flows on a routed Layer 3 interface, with the public address and outside zone on one logical interface and no VLAN tagging. Which port channel design meets the deployment requirements?
Select an answer to reveal the explanation.
Short Explanation
You’ll want to bundle all four links in a dynamic LACP port channel, then assign your public IP address and outside zone to that logical interface—like four lanes joining one road, with both ends agreeing on LACP. You’ll get up to 40 Gbps of aggregate capacity across traffic flows without VLAN tagging, though a single flow may be limited to one link’s 10 Gbps capacity.
Full Explanation
Dynamic LACP means the firewall and the switch exchange control frames and build the bundle when both sides are configured to negotiate, giving you one logical interface that owns the public address, the outside zone, and the route toward the internet. With all four members bundled, the links provide up to 40 Gbps of aggregate capacity across traffic flows, and a failed member is removed automatically while the rest keep forwarding. A static port channel on the firewall against an LACP switch uses mismatched negotiation modes, so the two ends do not form the intended bundle. Bundling three links and holding one back as an independent backup link is a legitimate redundancy pattern, but it misses the capacity requirement because the uplink can never reach 40 Gbps at once. Carrying the public subnet on a VLAN subinterface keeps the LACP negotiation healthy yet misses the untagged routed requirement, because the uplink is specified as one untagged Layer 3 interface. Exam caveat: member limits and interface naming vary by platform, so focus on negotiation mode and where the logical interface lives. Practical check: unplug one member and confirm the bundle stays up with three links active.