topic Configure FTD transparent mode from FMC: The all gigabiEthernet interface administratively down in Network Security

Configure FTD transparent mode from FMC: The all gigabiEthernet interface administratively down

peter.peng — Fri, 21 Feb 2020 16:25:59 GMT

Hi Sir:

When I setup the FTD to transparent mode and setup the BVI1 interface. It will show up the Diagnostic0/0 interface and status is ok. When I try to setup BVI1 group interface(G0/0 and G0/1). I found it's status is N/G, event I enable the interface. Could you tell me how to do it ?

Re: Configure FTD transparent mode from FMC: The all gigabiEthernet interface administratively down

Abheesh Kumar — Mon, 05 Nov 2018 10:19:03 GMT

Hi Peter,

Have enabled those interface from FXOS.

Re: Configure FTD transparent mode from FMC: The all gigabiEthernet interface administratively down

Abheesh Kumar — Mon, 05 Nov 2018 10:26:24 GMT

Hi Peter,

BVI is for bridging two vlans, If you create two sub-interface for example Gi0/0.10 is in vlan 10 and Gi0/0.20 is in vlan 20. You can create a BVI interface and map those to sub-interfaces into BVI interface.

HTH

-Abheesh

Re: Configure FTD transparent mode from FMC: The all gigabiEthernet interface administratively down

peter.peng — Mon, 05 Nov 2018 12:38:04 GMT

Hi Abheesh:

Sorry !! I'm first time to setup FMC and FTD. I had tried to login to the console of FTD and tried to enable it. But I don't know how to do it. What's the command to up this interface.

Second question: It I want to setup FTD with "Transparent mode" . What's the right procedure to setup interface ? Should I setup BVI interface ? Because I found some resource from youtube. It told me that I should create BVI interface and group two interface. One interface for inside and the other is outside.

Re: Configure FTD transparent mode from FMC: The all gigabiEthernet interface administratively down

peter.peng — Mon, 05 Nov 2018 12:47:51 GMT

Hi Sir:

My environment is just only FMC and FTD vm. Does it has Fxos ?

Re: Configure FTD transparent mode from FMC: The all gigabiEthernet interface administratively down

Abheesh Kumar — Mon, 05 Nov 2018 15:15:36 GMT

Hi Peter,

FTD provides two deployment modes and six interface types. If you would like to place your firewall as transparent and to filter traffic from Inside and Outside interfaces, you can go with Inline Pair Interfaces.

For configuring interface go to devices > edit > interfaces

then edit the interface and name it as INSIDE and don't assign security zone, just enable the interface

then do the same for Outside interface and go to Inline set.

To configure Inline set

Then go to interface and create security zone as per the Interface Inside for INSIDE_ZONE and Outside for OUTSIDE_ZONE.

Then create Access control policy and you can specify policy as per you requirements.

this document can help you to configure ACP and IPS policies.

https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/200924-configuring-firepower-threat-defense-int.html

https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/introduction_to_the_cisco_firepower_system.html

HTH

-Abheesh

Re: Configure FTD transparent mode from FMC: The all gigabiEthernet interface administratively down

peter.peng — Tue, 06 Nov 2018 13:13:36 GMT

Hi Sir:

After I setup my FTD with Inline-Pair Mode. Why I can't show any traffic session on my Dashboard ?

Re: Configure FTD transparent mode from FMC: The all gigabiEthernet interface administratively down

Abheesh Kumar — Tue, 06 Nov 2018 13:21:13 GMT

Hi Peter,

If you configure ACP and enable logging in the rule which you created, then you should be able to see the traffic in Analysis > Connection Events.

HTH

Abheesh