topic Re: add FPR4112 to FMC and show me error in Network Security

add FPR4112 to FMC and show me error

Dhikra Marghli — Mon, 16 Jan 2023 17:38:17 GMT

Hello ,

I have a problem .

I have FMC 4600 and i want to add two FPR 4112 to FMC but i can't !!!

i have two switch layer 3 have a protcole HSRP and with configuration :

we are VLAN 254 and

interface Vlan254
Edge-To-LAN#
ip address 192.168.254.251 255.255.255.0
standby 254 ip 192.168.254.250==============> as a gatwey in FPR 4112
standby 254 preempt

so I try more time to add FPR4112 to FMC and show me error :

so you will find Error in the picture ..thanks to check

please i wait a reply and a help from expert security to resolve problem

Thanks in adv

Re: add FPR4112 to FMC and show me error

Rob Ingram — Mon, 16 Jan 2023 17:43:02 GMT

@Dhikra Marghli well according to the screenshot, either the time is out of sync - you just need to ensure the FMC and FTD time is sync'd, ideally use the same NTP server for both.

Or the FTD and FMC cannot communicate with each other, can you ping the FMC from the FTD and vice versa?

If you login to the FMC via CLI, go to expert mode you can run tcpdump and filter on 8305 - you can then determine whether the FTD is attempting to establish the sftunnel.

Re: add FPR4112 to FMC and show me error

balaji.bandi — Mon, 16 Jan 2023 17:45:23 GMT

if they are in same VLAN and have access - as suggested NTP is major cause of the issue.

if they are able to reach each other its very simple to register manager :

https://www.balajibandi.com/?p=310

Re: add FPR4112 to FMC and show me error

Dhikra Marghli — Tue, 17 Jan 2023 09:36:22 GMT

i try that FMC and FTD have the same time either manual or with ntp server ...it show me same error

also from FTD cant' ping FMC but from switch layer 3 can ping FMC

please how i can resolve this problem !!

urgent and customer wait thisproblem reolve

thanks

Re: add FPR4112 to FMC and show me error

Rob Ingram — Tue, 17 Jan 2023 09:40:07 GMT

@Dhikra Marghli if the FTD cannot ping the FMC then that is your problem. Check the routing, can the FTD ping the next hop (switch)?

From the FTD when using the mgmt interface you need to use "ping system x.x.x.x" - the ping is then sent from the mgmt interface.

Re: add FPR4112 to FMC and show me error

Dhikra Marghli — Thu, 19 Jan 2023 11:44:09 GMT

thanks to reply me ...

the problem is reloved .because the solution require to configure two @ip : for chassis and @ip for FTD .

my problem ..i configure just one @ip for chassiss !!! that why i can't ping from ftd to fmc ..

ans also ..date is different

thanks all expert security cisco

Re: add FPR4112 to FMC and show me error

Marius Gunnerud — Thu, 19 Jan 2023 11:57:42 GMT

So FMC and FTD management are on different subnets and traffic would be routed through the FTD? So, @Rob Ingram 's solution is the correct solution. Please select it as the answer.