topic Re: interface management from FXOS in Network Security

interface management from FXOS

mortezasadeghi — Sat, 13 Nov 2021 17:58:41 GMT

Hi everyone

I diable some sub-interface in FTD 2120 and deploy the config from FMC. unfortunately the communication between FMC and FTD going through that interface. how can enable sub-interface from fxos/expert mode or roll back the config to the last one?

Re: interface management from FXOS

balaji.bandi — Sun, 14 Nov 2021 00:08:32 GMT

Hmm never come across this situation, In most cases, FTD and FMC will be connected and communicated using Management Interface.

Since you lost connection between FMC and FTD ( FTD command-level only has limited features).

what is the status of FTD, is this in production ? or do you lose Services - in this case contacting TAC is the best to fast resolutions.

If you like to do i can only think of as of now, - any interface that is active which can reach FMC, use that Interface to Join to FMC since FMC has known good configuration of the last revision to deploy for you.

Re: interface management from FXOS

mortezasadeghi — Sun, 14 Nov 2021 12:10:50 GMT

Hi balaji

thanks for replying

unfortunately FTD was in production and it works well, i just disable a sub-interface which it belongs to FMC and FTD communication.

Re: interface management from FXOS

balaji.bandi — Mon, 15 Nov 2021 00:00:02 GMT

unfortunately, i don't know the answer, raise a TAC Case about how you can do without any Service interruption here.

Re: interface management from FXOS

Marvin Rhoads — Mon, 15 Nov 2021 07:25:56 GMT

As @balaji.bandi noted, TAC can assist. There is a method from the expert cli on the device to make changes to the LINA config (including interface changes) apart from having to push them from FMC. However this should only be done with TAC assistance to ensure that you don't make an already bad situation worse.