topic Re: SFP Down on FPR 4100 in Network Security

SFP Down on FPR 4100

WamuMubiana1384 — Wed, 12 Jun 2024 13:57:58 GMT

Am trying to configure the Cisco FPR 4112 box. So far Chassis management has been configured and am able to access and manage the box ok either via SSH or Firepower Chassis Manager. The connection to the box via the chassis management port is successful.

Our box did not come with any SFP modules, so after adding new SFP modules to the box network module, they are visible and are able to enable them in Chassis Manager. However the network led lights are amber and further checks show the operational status as either link-down or Admin-down.

The same SFP modules when plugged on the chassis management network module are working ok. Please see image below:

please help to resolve this issue.

Thanks in advance.

Re: SFP Down on FPR 4100

Mark Elsen — Wed, 12 Jun 2024 15:47:04 GMT

>....Our box did not come with any SFP modules, so after adding new SFP modules to the box network module, they are visible and are able to enable them in Chassis Manager.However the network led lights are amber ...
- Check logs on the FPR just after doing that ,

Re: SFP Down on FPR 4100

WamuMubiana1384 — Wed, 12 Jun 2024 15:57:25 GMT

Hi Marce1000,

i will check the logs and feedback.

Re: SFP Down on FPR 4100

Marvin Rhoads — Wed, 12 Jun 2024 19:51:22 GMT

The dataplane interfaces will not come up until you have also assigned and enabled them in the logical device(s) to which they are assigned (i.e. your FTD or ASA instances running on the chassis).

https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/fp4100/firepower-4100-gsg/ftd_fmc_deploy.html#task_e1b_dcz_xgb

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/device-config/740/management-center-device-config-74/device-ops-logical-devices.html#id_81716

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/device-config/740/management-center-device-config-74/interfaces-settings-ifcs-overview.html#ID-2075-00000197

Re: SFP Down on FPR 4100

WamuMubiana1384 — Thu, 13 Jun 2024 08:35:04 GMT

The intention is to use the local device manager. The data interfaces have been enabled in chassis manager and assigned to the logical device. A management interface has also been configured. However device manager cannot be started as the assigned Management port is showing link-down. in the same vein all assigned data interfaces cannot be enabled.

Re: SFP Down on FPR 4100

MHM Cisco World — Thu, 13 Jun 2024 08:48:38 GMT

I think it incompatibility between the SFP and FTD
check bug below how you can check the SFP in FXOS of FTD

https://bst.cisco.com/quickview/bug/CSCwa67888

I always suggest use cisco SFP or what cisco suggest
using other vendor or even incompatible SFP in FTD led to this case

MHM

Re: SFP Down on FPR 4100

Marvin Rhoads — Thu, 13 Jun 2024 17:03:30 GMT

OK @WamuMubiana1384 I understand.

Have you checked the speed of the interface as specified in FCM? Make sure what is in the chassis manager matches the SFP type (genuine Cisco strongly suggested as noted by @MHM Cisco World - fxos can be finicky about that) and the connected downstream switch.

Re: SFP Down on FPR 4100

WamuMubiana1384 — Fri, 14 Jun 2024 15:12:16 GMT

Hi Marvin,

The interfaces have managed to come up after changing the admin speed to the one that matches the SFP module type.