topic Re: ASA/Firepower interfaces not coming up in Network Security

ASA/Firepower interfaces not coming up

sobin peter — Tue, 12 Mar 2019 14:10:16 GMT

I am in middle of an implementation of FTD and FMC

I am facing an issue with the interfaces in FTD. We have 2x2140 devices which is added to FMC with the management interface. Connected a 10G port to core switch and it came up but rest all ports are not coming up. Can somebody help me in this case.

Re: ASA/Firepower interfaces not coming up

Rob Ingram — Wed, 12 Dec 2018 17:41:51 GMT

Hi,

Have you configured the interfaces of the device in the FMC and deployed the policy? The interfaces will only come up once you've done that.

HTH

Re: ASA/Firepower interfaces not coming up

Abheesh Kumar — Wed, 12 Dec 2018 17:44:25 GMT

Hi,
Go to FMC Devices > edit > Interfaces
check weather did you enable the interfaces.

Hope This Helps
Abheesh

Re: ASA/Firepower interfaces not coming up

sobin peter — Wed, 12 Dec 2018 17:48:09 GMT

Hi Thanks for the response.

I have enabled the interfaces on both firewalls from FMC but no policies are configured yet. Unless configuring any policy, there is one interface which came up.

One thing to be mentioned is that, the one interface which is up now, is connected before adding the devices to FMC. After adding to FMC there was license sync error seen and contacted cisco licensing team to resolve it.

Re: ASA/Firepower interfaces not coming up

sobin peter — Wed, 12 Dec 2018 17:48:32 GMT

Hi Thanks for the response.

I have enabled the interfaces on both firewalls from FMC but no policies are configured yet. Unless configuring any policy, there is one interface which came up.

Re: ASA/Firepower interfaces not coming up

sobin peter — Wed, 12 Dec 2018 17:49:57 GMT

Hi
I did that. enabled the interfaces but its still shows disabled and down.

Re: ASA/Firepower interfaces not coming up

Abheesh Kumar — Wed, 12 Dec 2018 17:53:10 GMT

To which device is the FTD is connecting. Is your FTD in HA...???

I mean is it in VSS or VPC or Etherchanel..?

Re: ASA/Firepower interfaces not coming up

Rob Ingram — Wed, 12 Dec 2018 17:56:55 GMT

If you've configured and enabled the interfaces but not deployed a policy then the FTD will not yet know that the interfaces should be enabled. When enabling/configuring the interfaces, these changes are not dynamic and the configuration needs to be deployed.

HTH

Re: ASA/Firepower interfaces not coming up

sobin peter — Wed, 12 Dec 2018 17:57:16 GMT

To cisco 9300 switch with 10G. Still not done HA.

Re: ASA/Firepower interfaces not coming up

Abheesh Kumar — Thu, 13 Dec 2018 06:45:50 GMT

So both are individual firewalls, Can you check the speed of interfaces in both the side.
Can you share a screen shot from FMC for interface configuration and the other side switch interface configurations.

Re: ASA/Firepower interfaces not coming up

sobin peter — Wed, 12 Dec 2018 18:09:30 GMT

Yes both are now individual. I will share it tomorrow. One port in the FTD is up. I connected all other fiber cables from the switch side connected to the working port and it is coming up so switch side seems to be ok. Then the working cable connected to other FTD ports and does not come up.

Re: ASA/Firepower interfaces not coming up

Abheesh Kumar — Wed, 12 Dec 2018 18:17:02 GMT

Is it a portchannel or normal interface

Re: ASA/Firepower interfaces not coming up

sobin peter — Wed, 12 Dec 2018 18:22:53 GMT

Normal interface. Just started the implementation. No HA, portchannel, policies routing configured yet.

Re: ASA/Firepower interfaces not coming up

hcssupport — Fri, 27 Dec 2019 16:24:11 GMT

Hi All,

It is old forum but i like to give my answer as someone will get benefited.

once you have enabled the interface, you must give "commit-buffer" command which will bring up your interfaces.

Re: ASA/Firepower interfaces not coming up

Forward — Mon, 19 Aug 2024 08:14:04 GMT

commit-buffer where

Re: ASA/Firepower interfaces not coming up

Marvin Rhoads — Mon, 19 Aug 2024 08:43:20 GMT

@Forward "commit-buffer" is only for devices running in platform mode when you have enabled the interface (or made other configuration change) via the fxos cli.