topic Re: FTDv Interface Not Pinging in Network Security

FTDv Interface Not Pinging

CiscoIPMAN — Mon, 22 Jun 2020 19:18:28 GMT

I currently have a FTDv managed by FMC (v6.4). I have configured an inside interface through the FMC that is connecting to an access switch with an IP address but did not add a security zone. Problem is I cannot ping that interface from the switch or any other device. I can ping the FMC ok but that is on a different network. The ARP entry on the switch shows incomplete from the Inside interface and no ARP entry on the FTD. I have added a static ARP entry on both the FTDv and the switch but no luck.

Is there something that I am missing here or maybe related to the FTD being virtual?

Thanks

Re: FTDv Interface Not Pinging

Rob Ingram — Mon, 22 Jun 2020 19:52:32 GMT

Hi,

When you configured the interface in the FMC did you enable the interface and deploy the policy?

Can you ping the switch from the FTD?

How did you configure the virtual nic?

Re: FTDv Interface Not Pinging

CiscoIPMAN — Mon, 22 Jun 2020 20:19:47 GMT

Rob,

Yes I have enabled and deployed the configuration. I can not ping the switch from the FTD but I can ping the FMC from the m0/0 interface.

I am using a KVM image but no issue using the management interface to the FMC.

Thanks

Re: FTDv Interface Not Pinging

Marvin Rhoads — Wed, 24 Jun 2020 01:56:47 GMT

Have you configured the interfaces in KVM as promiscuous mode and disabled port security?

https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/kvm/ftdv-kvm-gsg/ftdv-kvm-intro.html#Cisco_Reference.dita_07304b2d-372d-4aca-99ad-c2eb3afa79e0