topic Re: Crazy error with Management Interface in Network Security

Crazy error with Management Interface

Derek1993 — Fri, 30 Jun 2023 11:08:10 GMT

Hello evryone! Need Help!

I have already configured my FP 1120 via Firepower Device Manager - all is Ok. But after some times I receive error: On mai window of ftd my ISP icon is grey and NTP Service doesn't work - also grey! I know that there is an error with Management Interface, BUT I cann't uderstandt what configuration is correct. So for now my Management Interface Configuration is:
Use Unique Gateways for the Management Interface with Fallback to Data Interfaces

output of command show network:

DNS Servers : 1.1.1.1 1.0.0.1 DNS from router : disabled Management port : 8305 IPv4 Default route Gateway : data-interfaces ==================[ management0 ]=================== Admin State : enabled Admin Speed : 1gbps Operation Speed : indeterminate Link : link-down Channels : Management & Events Mode : Non-Autonegotiation MDI/MDIX : Auto/MDIX MTU : 1500 MAC Address : 40:06:D5:85:FF:80 ----------------------[ IPv4 ]---------------------- Configuration : DHCP ----------------------[ IPv6 ]---------------------- Configuration : Disabled ===============[ Proxy Information ]================ State : Disabled Authentication : Disabled

I have tried also using static route for my FP 1120 - Did work!
Plz Help !

Re: Crazy error with Management Interface

Aref Alsouqi — Fri, 30 Jun 2023 11:16:21 GMT

It does seem your management interface status is showing link-down.

Re: Crazy error with Management Interface

Derek1993 — Fri, 30 Jun 2023 11:25:53 GMT

Yes I saw, maybe it means that some problem with ISP ?

or How I can enable interface

Re: Crazy error with Management Interface

Derek1993 — Fri, 30 Jun 2023 12:09:00 GMT

Yes I saw, maybe it means that some problem with ISP ?

or How I can enable interface ??

Re: Crazy error with Management Interface

Kasun Bandara — Fri, 30 Jun 2023 12:32:53 GMT

@Derek1993 to where you connected your management port? directly to ISP? normally management port connected to internal network and it should separate from other traffic. check the cable and try plugin port to another switch port and try to isolate problem

Re: Crazy error with Management Interface

Derek1993 — Fri, 30 Jun 2023 12:38:28 GMT

No, My Management Interface doesn't conncet directly to ISP! I use data interface as gateway for Management Interface!

Re: Crazy error with Management Interface

Derek1993 — Fri, 30 Jun 2023 12:38:56 GMT

Yes, But Why? Why cann't use Management Interface vi Data interface ??

Re: Crazy error with Management Interface

MHM Cisco World — Fri, 30 Jun 2023 12:43:52 GMT

This your second post'

I ask you in your other post did you connect mgmt to INside and from there to internet and fmc ? It seem to Yes'

I.e. this traffic is effect by policy you config in FTD' so try bypass traffic from inspect by snort.

Re: Crazy error with Management Interface

Aref Alsouqi — Fri, 30 Jun 2023 14:43:15 GMT

That seems to be an issue with the connectivity to the management interface, and wouldn't be related to any routing or traffic flow issue. Where the management interface is connected? directly to a data interface on the firewall or does it go to a switch?

Re: Crazy error with Management Interface

Derek1993 — Sat, 01 Jul 2023 10:20:02 GMT

Yes, it is the second (I will delete the previous post).
The Management interface connects like this: Use Unique Gateways for the Management Interface with Fallback to Data Interfaces. Does it mean that Management is related to Inside Interface?
P.S.
Sorry for long responce

Re: Crazy error with Management Interface

Derek1993 — Sat, 01 Jul 2023 10:22:59 GMT

Hi
Yes, the Management interface connects to the data interface, without any switch!

Re: Crazy error with Management Interface

Aref Alsouqi — Sat, 01 Jul 2023 11:04:03 GMT

I would check the status of that data interface, it might also be a cable issue or something physical that is causing the management port to show in down state.

Re: Crazy error with Management Interface

Derek1993 — Sat, 01 Jul 2023 11:09:47 GMT

The Data Interface all is Good - I have Internet via FP 1120. Maybe it's some configuration on the Firewall of FP 1120??
and What do you mean check the status of the data interface? What information Do I must to provide for you?

Re: Crazy error with Management Interface

Aref Alsouqi — Sat, 01 Jul 2023 11:27:22 GMT

If the management interface is connected to a data interface on the firewall, say for example the management interface is connected to interface ethernet1/3 on the firewall, then I would check the cable and the status of the interface ethernet1/3 because if the cable connecting the management interface to interface ethernet1/3 is faulty or not plugged properly, or if ethernet1/3 interface is administratively down then the management port would show in down state. We need to rule out any physical issue first imo, maybe you can just check the LED lights on the data interface and see if they are on.

Re: Crazy error with Management Interface

Derek1993 — Sun, 02 Jul 2023 16:34:46 GMT

So, Sorry for the stupid question, how I can check where my Management interface is Connected to FP 1120 because now there is not any cable connected to the Management interface? How I can recheck this info ?

Re: Crazy error with Management Interface

MHM Cisco World — Sun, 02 Jul 2023 17:26:42 GMT

I think FMC 6.7 before not support data interface as mgmt interface
FMC 6.7 later support data interface as mgmt interface
which ver. you use for FMC ?

Re: Crazy error with Management Interface

Aref Alsouqi — Sun, 02 Jul 2023 23:22:02 GMT

If there is no cable connected to the management interface then that explains the link down state shown in the output you shared. Could you please share the screenshots of the issues you are experiencing as I feel we are not on the same page.

Re: Crazy error with Management Interface

Derek1993 — Mon, 03 Jul 2023 13:08:39 GMT

No I use FDM Latetst version

Re: Crazy error with Management Interface

Derek1993 — Mon, 03 Jul 2023 13:35:32 GMT

@Aref Alsouqi @MHM Cisco World @Kasun Bandara Hey there. The main question for now How I can Use Management interface on my FP 1120 with latest verion of FDM via Data Interface, because for now I have next situation:

Re: Crazy error with Management Interface

MHM Cisco World — Mon, 03 Jul 2023 13:37:28 GMT

I really sorry for late reply
I will answer you tonight
thanks
MHM