topic Re: FDM management access issues in Network Security

FDM management access issues

shepyard1980 — Wed, 13 Dec 2023 10:01:28 GMT

Hi,

Cisco Firepower 1120 NGFW

FXOS: 2.10(1.75)

FTD: 7.0.1-84
Managed by FDM only

I cannot access FDM web interface or SSH on the physical management1/1 interface. I can only manage it through the data interfaces which is fine but I want to setup up HA and be able to access the standby firewall. I do not understand how the virtual management interface (management0) works I give it an IP address but no matter what I do I cannot access it on HTTPS or SSH.

Any help would be much appreciated.

Re: FDM management access issues

MHM Cisco World — Wed, 13 Dec 2023 10:04:15 GMT

If you can access via data ( in same time config as mgmt interface) then why yoh want to access via physical mgmt interface?

MHM

Re: FDM management access issues

shepyard1980 — Wed, 13 Dec 2023 10:07:28 GMT

I want to be able to manage the standby firewall when I have HA setup, I can't access the standby firewall on the data interfaces

Re: FDM management access issues

MHM Cisco World — Wed, 13 Dec 2023 10:12:47 GMT

Try connect your PC to physical mgmt interface

Make PC NIC using dhcp not manual IP

Then try https using IP

192.168.45.45

Hope you sucess friend

MHM

Re: FDM management access issues

shepyard1980 — Wed, 13 Dec 2023 10:16:23 GMT

No the management1/1 interface is default set to get an ip address from DHCP which I don't have to test with, if I give it a static ip address I cannot access the FDM web interface if I am on the same subnet as stated.

Re: FDM management access issues

MHM Cisco World — Sun, 17 Dec 2023 19:25:16 GMT

MHM

Re: FDM management access issues

shepyard1980 — Wed, 13 Dec 2023 10:49:19 GMT

I'm afraid you are wrong my friend,

https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/fp1100/firepower-1100-gsg/ftd-fmc.html

By default, the Management 1/1 interface is enabled and configured as a DHCP client. If your network does not include a DHCP server, you can set the Management interface to use a static IP address during initial setup at the console port.

I cannot believe how confusing it is to just manage this device, I just need to be able to manage a standby firewall when it is part of a HA setup!