topic Re: Firepower 2110 Dual-ISP failover with web FDM GUI in Network Security

Firepower 2110 Dual-ISP failover with web FDM GUI

QBC — Fri, 21 Feb 2020 16:29:24 GMT

I'm looking to set up a Firepower 2110 Threat Defense using the Firepower Device Manager GUI.
I have a single outside interface set to the main ISP that all traffic is currently routing through, but also have a secondary outside interface for a second ISP.
The secondary interface shows that the link is up, and it acquired an IP address, but what I can't find in the FDM is any way to have it fail over to the second WAN when the first is unavailable.

I've found countless guides on doing this using SLA, but unfortunately, neither the CLI, nor the FlexConfig on the FP2110 seem to allow those commands.

Is there any good method to configure a simple ISP failover on this device?

Re: Firepower 2110 Dual-ISP failover with web FDM GUI

balaji.bandi — Tue, 20 Nov 2018 22:28:24 GMT

this video may help you understand how you can achieve this

https://www.youtube.com/watch?v=MKcSBTJ55e8&t=18s

Re: Firepower 2110 Dual-ISP failover with web FDM GUI

QBC — Wed, 21 Nov 2018 14:25:12 GMT

Hello,
Thank you for the reply, but I was hoping to find a way to achieve this using the Firepower Device Manager built into the 2110 device (https management login) or the fxos SSH console.

We don't have an FMC available at this point.

Re: Firepower 2110 Dual-ISP failover with web FDM GUI

balaji.bandi — Wed, 21 Nov 2018 20:08:03 GMT

Once you understand the concept deploying in FDM like a ASA.

below FDM Cisco videos should help you.

https://www.youtube.com/watch?v=PW8EnCBafXw&list=PLpTzgIVB0QBvsGCWw1ElsV8X8qyheMCs8&index=1