How to: configure a two-arm deployment v11.4.1

Everytime I look "two-arm" or "multi-arm" I get one-arm deployments.   Im trying to deploy a multi vlan network:   Firewall is the gateway and the VIP/VS subnet are public IPs coming from th...