topic Re: FTD Managment Interface DOWN/UP in Network Security

FTD Managment Interface DOWN/UP

rbermel83 — Fri, 21 Feb 2020 14:39:32 GMT

I have a newly upgraded ASA 5516 that was previously running ASA OS and is now running FTD. For some reason the Management1/1 interface is admin down, line up.

Interface Management1/1 "diagnostic", is administratively down, line protocol is up
Hardware is en_vtun rev00, BW 1000 Mbps, DLY 10 usec
Auto-Duplex(Full-duplex), Auto-Speed(1000 Mbps)
Input flow control is unsupported, output flow control is off
MAC address 70db.9822.ac66, MTU 1500
IP address unassigned
0 packets input, 0 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
0 pause input, 0 resume input
0 L2 decode drops
0 packets output, 0 bytes, 0 underruns
0 pause output, 0 resume output
0 output errors, 0 collisions, 0 interface resets
0 late collisions, 0 deferred
0 input reset drops, 0 output reset drops
input queue (blocks free curr/low): hardware (0/0)
output queue (blocks free curr/low): hardware (0/0)
Traffic Statistics for "diagnostic":
0 packets input, 0 bytes
0 packets output, 0 bytes
0 packets dropped
1 minute input rate 0 pkts/sec, 0 bytes/sec
1 minute output rate 0 pkts/sec, 0 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 0 pkts/sec, 0 bytes/sec
5 minute output rate 0 pkts/sec, 0 bytes/sec
5 minute drop rate, 0 pkts/sec
Management-only interface. Blocked 0 through-the-device packets

I can see in the running-config that it is in a shutdown state but cannot figure out how to bring up the interface.

interface Management1/1
management-only
shutdown
nameif diagnostic
cts manual
propagate sgt preserve-untag
policy static sgt disabled trusted
security-level 0
no ip address

Any assistance is greatly appreciated.

Thank you,

Ryan

Re: FTD Managment Interface DOWN/UP

Flavio Miranda — Mon, 06 Nov 2017 23:24:37 GMT

Hi @rbermel83

Have you tried this:

interface management n/n
no shutdown

https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/reimage/asa-ftd-reimage.html

-If I helped you somehow, please, rate it as useful.-

Re: FTD Managment Interface DOWN/UP

rbermel83 — Tue, 07 Nov 2017 13:04:09 GMT

Yes, that option isn't even available in FTD OS.

Re: FTD Managment Interface DOWN/UP

mikael.lahtela — Wed, 08 Nov 2017 16:55:12 GMT

Hi,

Can you check in your management configuration for diagnostic interface, try and change it and redeploy policy.

br, Micke

Re: FTD Managment Interface DOWN/UP

rbermel83 — Thu, 09 Nov 2017 15:44:34 GMT

I had to call TAC on this for a resolution. It was actually due to the config-register being set to 0x41. Changing it to 0x1 resolved the issue.

Re: FTD Managment Interface DOWN/UP

InexAdmin — Sun, 14 Apr 2019 14:17:49 GMT

Thanks! I had the same issue and was scratching my head for a while trying to figure out why the management interface wasn't coming up! Thank you!

Re: FTD Managment Interface DOWN/UP

L.Jojua1989 — Wed, 04 Mar 2020 07:17:19 GMT

Thanks for this post. I spent a lot of time to resolve this issue.

Re: FTD Managment Interface DOWN/UP

Chris Russo — Wed, 21 Jul 2021 23:46:08 GMT

Thanks, This is why ASA's are falling way short of Palo Alto's.