Hi Ariel, in firewall point of view, Firewall Cluster knows only one IP address and it doesn't care which device is currently listening on. I mean, if your firewall default gateway is 188.8.131.52, the HSRP group active router listens 184.108.40.206, so you can specify which of these routers will be active by configuring standby (group) priority (priority).
On the other hand router interfaces have to be connected via switched infrastructure to the firewall cluster, or firewall cluster interfaces which connected to the routers have to be bridged interfaces, becasue routers must listen multicast packets on the interfaces which will form a HSRP group.
We are pleased to announce availability of Beta software for 16.6.3. 16.6.3 will be the second rebuild on the 16.6 release train targeted towards Catalyst 9500/9400/9300/3850/3650 switching platforms. We are looking for early feedback from custome...