topic Re: Getting the FMT to communicate with FMC in Network Security

Getting the FMT to communicate with FMC

jdelgado89 — Fri, 11 Sep 2020 22:37:10 GMT

Hello, I am currently in the process of upgrading my ASA Version 9.8 running on a FP 2210. I am currently using the Firepower Migration Tool, it is able to pull down the find no problem from the ASA. However, when I put in the IP for the FMC and Usernamd and Password, I get

"Blocked

Invalid FMC credentials, Please try again"

Now I have tested the creds, I can log into the web portal and I can SSH into the box with them. Any and all advice would be helpful.

Thank you

Re: Getting the FMT to communicate with FMC

Marvin Rhoads — Sat, 12 Sep 2020 03:04:39 GMT

Please check the access to the API explorer on your FMC as follows:

Navigate to the following URL: https://<management_center_IP_or_name>:<https_port>/api/api-explorer

Use the same credentials that you are trying with the FMT.

Getting the FMT to communicate with FMC

jdelgado89 — Mon, 14 Sep 2020 16:09:22 GMT

Hey Marvin,

When I go to https://10.10.82.2/api/api-explorer I get:

Not Found

The requested URL /api/api-explorer was not found on this server.

I am not aware of any other ports open other 443 and 22. What am I doing wrong or what would you suggest I try next

Thank you

Re: Getting the FMT to communicate with FMC

bharrington — Mon, 14 Feb 2022 21:35:18 GMT

Was this ever resolved. I am having the same issue even though the FMT did work last week and successfully connected to the FMC.

Thanks

Re: Getting the FMT to communicate with FMC

Marvin Rhoads — Tue, 15 Feb 2022 07:45:09 GMT

@bharrington check the console window of the FMT for any errors and share with us please.

Re: Getting the FMT to communicate with FMC

jesse.garcia11 — Tue, 08 Mar 2022 16:57:50 GMT

We are having this issue as well. I cannot see any api options in the System>>>Configurations options in the FMC. Can anyone help with this issue if they were able to get it resolved?

Re: Getting the FMT to communicate with FMC

Marvin Rhoads — Tue, 08 Mar 2022 17:34:35 GMT

@jesse.garcia11 is the FMC user an Admin level account?

Re: Getting the FMT to communicate with FMC

jesse.garcia11 — Tue, 08 Mar 2022 17:36:51 GMT

Hi @Marvin Rhoads , yes it is the default admin user account. I also created one as well, and tried that one too.

Re: Getting the FMT to communicate with FMC

Marvin Rhoads — Tue, 08 Mar 2022 17:57:45 GMT

That's odd. I've used the migration tool at least 6-7 times on different FMCs and never had that problem.

You might want to open a TAC case using your FMC's support contract to have them look into it.

Re: Getting the FMT to communicate with FMC

bharrington — Tue, 08 Mar 2022 18:19:14 GMT

I resolved the issue by putting a check on the Enable Rest API checkbox in FMC see attached images.

Re: Getting the FMT to communicate with FMC

jesse.garcia11 — Tue, 08 Mar 2022 18:53:37 GMT

Ok I will do that. Thanks @Marvin Rhoads . Question. I have created the asa under the logical device in the FMC web interface. Should I have done that? Or will this migration take the asa over and create it for me? We are migrating from ASA5585 ver,Cisco Adaptive Security Appliance Software Version 9.8(4). We are migrating to Cisco Firepower 4115 Security Appliance , ver 2.8.9

Re: Getting the FMT to communicate with FMC

jesse.garcia11 — Tue, 08 Mar 2022 18:54:22 GMT

I see. You interface looks much different then mine. Now I see we have different models as I am in a 4115