topic Re: Firepower1140 interface status in Network Security

Firepower1140 interface status

Toshiyuki Yamashita — Fri, 25 Mar 2022 08:18:49 GMT

In my environment, firepower1140(ASA appliance mode) e1/2 is connected to Catalyst 2960S Gigabit port.

And we find the following occurence.

e1/2(auto/auto)-2960S(auto/auto) ->firepower port status : up(1G/Full)

e1/2(100/Full)-2960S(auto/auto) ->firepower port status : up(100/Full)

e1/2(100/Full)-2960S(100/Full) ->firepower port status : not connect

e1/2(auto/auto)-2960S(100/Full) ->firepower port status : up(100/half)

e1/2(100/auto)-2960S(100/Full) ->firepower port status : up(100/half)

I wonder why 1/2(100/Full)-2960S(100/Full) is not connet.

Is there any suggestion ?

Re: Firepower1140 interface status

Sheraz.Salim — Fri, 25 Mar 2022 09:18:02 GMT

what does it show on the switch interface thats connect to the Firewall?

Re: Firepower1140 interface status

Toshiyuki Yamashita — Fri, 25 Mar 2022 13:17:41 GMT

Thank you for your response.

I check switch status connected to firepower.

---------------------------------------
e1/2(auto/auto)-2960S(auto/auto)
->

firepower port status : up
Auto-Duplex(fullDuplex), Auto-Speed(1gbps)

switch port status
a-full a-1000 10/100/1000BaseTX
---------------------------------------

e1/2(100/Full)-2960S(auto/auto)
->firepower port status : up(100/Full)

Full-Duplex(fullDuplex), 100 Mbps(1gbps)

switch port status

Gi1/0/22 a-full a-1000 10/100/1000BaseTX

*Firepower port status and switch port status are not same.

---------------------------------------
e1/2(100/Full)-2960S(100/Full)
->firepower port status : not connect

Ethernet1/2 manual down down

switch port status
Gi1/0/22 full 100 10/100/1000BaseTX

---------------------------------------
e1/2(auto/auto)-2960S(100/Full)
->firepower port status : up(100/half)
Auto-Duplex(halfDuplex), Auto-Speed(100mbps)

switch port status
Gi1/0/22 full 100 10/100/1000BaseTX
---------------------------------------
e1/2(100/auto)-2960S(100/Full)
->firepower port status : up(100/half)
Auto-Duplex(halfDuplex), 100 Mbps(100mbps)

switch port status
Full-duplex, 100Mb/s
---------------------------------------

I doubt this phonomenon is bug(CSCwa31696 FDM: ifc down when configuring Speed/duplex to fixed 100/Full interface).

But I can't check above bug for not having enough authentication...

Re: Firepower1140 interface status

Sheraz.Salim — Fri, 25 Mar 2022 16:30:41 GMT

Hey i cant not see this bug. its not loading

Re: Firepower1140 interface status

Toshiyuki Yamashita — Fri, 25 Mar 2022 17:25:23 GMT

I also can't see the bug whole information(CSCwa31696).

But you can check the bug information from Bug Search Tool by searching for "ifc down when configuring Speed/duplex to fixed 100/Full interface".

We cannot see the whole information, but can grasp the summarized information.

Re: Firepower1140 interface status

Sheraz.Salim — Sat, 26 Mar 2022 19:31:24 GMT

The only 1 interface is configured as 1G but rest on 100MB. any reason why is that? Have tried the not working port to another switch? consider changing the cable to switch to firewall (not working port).