Hello, I would say:
Port 24 of Switch 1 should be Tagged member of VLAN 100 and VLAN 101 (to evaluate if it needs to be also Untagged member of some other VLAN id, it depends)
Port 23 of Switch 2 should be Tagged member of VLAN 100 and VLAN 101 (to evaluate if it needs to be also Untagged member of some other VLAN id, it depends)
Port 24 of Switch 1 and Port 23 of Switch 2 act as a trunk (here trunk means carrying more VLAN tags) and they should be set on both ends as point-to-point-mac true (because those ports interconnect two switches -> in ProCurve it means a command such as spanning-tree ethernet <port-id> point-to-point-mac true IF you have spanning tree properly configured yet on both switches).
Port 24 of Switch 2 (facing your Firewall) should be a Tagged member of VLAN 100, VLAN 101, VLAN 200 and VLAN 201: the assumption is that your Firewall is properly configured to be the router for those four VLAN ids...and so its Ethernet Interface facing the Switch 2 should be configured to carry VLAN 100, 101, 200 and 201 and it should be configured with VLAN IP addresses (those are the Gateway IP Addresses respectively for clients of VLAN 100, clients of VLAN 101, clients of VLAN 200 and clients of VLAN 201). Another assumption is that Switch 1 and Switch 2 don't perform any IP Routing (ip routing disabled).
Edit: another assumption (more related to terminology I used, concepts remain the same) is that you're dealing with HP ProVision or Aruba ArubaOS-Switch OS based switch series.