FTD not pinging VLANs/Sub-ints on trunk port to SW (LAN only setup)

S3C — Fri, 28 Aug 2020 08:48:22 GMT

FTD setup through both cli & FMC

Interface 1 conf:

5 sub-interfaces, each interface is VLAN ID + SubintID = 10,20,30,40,50

IP: 192.168.10.10, 192.168.20.10 etc

SW Setup CLI:

Interface 9:

Switchport mode trunk

switchport trunk allowed vlan 10,20,30,40,50

Interface 1 - 5: (each interface got 1 VLAN added. int 1 = VLAN10, int 2 = VLAN20 and so on)

Switchport mode access

Switchport access vlan 10

VLAN 10,20,30,40,50:

Got the same IP as the Sub-ints on the FW

---------------------------------------------------------------

Interfaces & VLANs are up, but cant ping from either device.

On FTD I have enabled ICMP & made ACLs totally open but no success.

This is the end idea:

Host -> VLANx/interfacex -> interface9 (trunkport) -> FTD -> FTD inspects packets & route it back to source host

What have I missed to conf or done wrong?

Any suggestions would be great 🙂

Also check attached for diagram.

Re: FTD not pinging VLANs/Sub-ints on trunk port to SW (LAN only setup)

S3C — Fri, 28 Aug 2020 12:47:12 GMT

Just realized the FTD havent commited my changes of the sub-ints as its not licensed yet...closing discussion.