topic Re: Firepower 7.42 issue interface Management0 has no link in Network Security

Firepower 7.42 issue interface Management0 has no link

Lee Dress — Fri, 11 Oct 2024 12:26:15 GMT

I'm in the process of upgrading all of my firepower devices from 7.2.8 to 7.4.2 as it is the suggested release.

we use the data interfaces as the management interface for most remote devices.

As I upgrade each one, I'm now presented with a critical warning the Interface Management0 has no link.

I have turned off interface statistics in the health monitor policy, and all devices show green on the health monitor page.

but the drop down notification screen still shows 6 critical warnings. See attached screenshots.

all devices are working normally. VPN tunnels and traffic are not affected.

I have a case open with TAC, they're not getting back to me till Monday.

I thought maybe someone here might know the solution.

Re: Firepower 7.42 issue interface Management0 has no link

balaji.bandi — Fri, 11 Oct 2024 16:11:16 GMT

that is ok that is complaining about no traffic, that is not to worry bit.

coupld be cosmetic bug.

Re: Firepower 7.42 issue interface Management0 has no link

Marvin Rhoads — Fri, 11 Oct 2024 18:40:00 GMT

If you are not using the management interface, you can exclude it from monitoring - use the System > Health > Exclude menu

Re: Firepower 7.42 issue interface Management0 has no link

Lee Dress — Fri, 11 Oct 2024 18:59:17 GMT

the management interface is not listed as something to exclude in the menu.

I already have tried interface statistics, but that doesn't clear it up in the drop down notification menu.

Re: Firepower 7.42 issue interface Management0 has no link

Lee Dress — Fri, 11 Oct 2024 19:07:30 GMT

I found it.

you need to go to Devices / Device Management,

Select the Device, and go to Health / Excluded

Check Interface status in this screen and the warning goes away.

Re: Firepower 7.42 issue interface Management0 has no link

mchammer7 — Mon, 14 Oct 2024 08:40:20 GMT

We excluded the interface status in the health policy, but the warning in FMC is still shown in 7.4.2. With 7.2.8 no warnings were shown. Any suggestions ?

Re: Firepower 7.42 issue interface Management0 has no link

Marvin Rhoads — Mon, 14 Oct 2024 09:13:04 GMT

@Lee Dress that option will exclude all interface monitoring from health policy and associated alerts. 7.4+ will allow you to do a custom exclusion to remove only a subset of interfaces - such as management only - while continuing to monitor all others.

Re: Firepower 7.42 issue interface Management0 has no link

Lee Dress — Mon, 14 Oct 2024 12:10:36 GMT

I do not see the option in my system health exclude screen.

Re: Firepower 7.42 issue interface Management0 has no link

Lee Dress — Mon, 14 Oct 2024 12:19:10 GMT

I see it now. maybe because all of my devices weren't upgraded to 7.4.2 it wasn't showing.

trying your suggestion now.

Re: Firepower 7.42 issue interface Management0 has no link

Marvin Rhoads — Mon, 14 Oct 2024 12:25:40 GMT

Only after you enable module level exclusion and then Network Card / Interface move the slider for Interface Statistics will you see the option to select individual interfaces.

The screenshot below is on FMC 7.6, but I have confirmed it is available on 7.2.x and 7.4.x as well.

Re: Firepower 7.42 issue interface Management0 has no link

Lee Dress — Mon, 14 Oct 2024 12:31:14 GMT

this didn't work. the exclusion is for Management 1/1 but my warning is for management0. I still have health warnings on all the devices that use the Data interfaces as the management interface. there is no option for "management0" in the list.

Re: Firepower 7.42 issue interface Management0 has no link

mchammer7 — Mon, 14 Oct 2024 13:48:11 GMT

The same for me. I do not see these option. I can only check button for interface status. But no selection. Also my FMC looks totally different.
But still even with interface status selected, the error message does not disappear.

[cid:image001.png@01DB1E47.85BC19D0]

Re: Firepower 7.42 issue interface Management0 has no link

Marvin Rhoads — Mon, 14 Oct 2024 14:42:18 GMT

I just checked a deployment with remote 1010s with FTD 7.2.8 managed via their data interface. management0 in clish (ftd cli shell) is equivalent to Management1/1 or "diagnostic" in the LINA shell (system support diagnostic cli).

In any case, your settings there should result in the exclusion of those alerts (assuming the exclusion policy had been associated to the device and deployed).

If that's not working, a TAC case might be a good next step.

Re: Firepower 7.42 issue interface Management0 has no link

Lee Dress — Mon, 14 Oct 2024 14:47:48 GMT

I tried that with Management 1/1 but when I turned off my exclusions the warnings for management0 came back.

thank you for trying to help. I appreciate it.

Re: Firepower 7.42 issue interface Management0 has no link

mchammer7 — Mon, 14 Oct 2024 15:03:11 GMT

Okay I think I will open a TAC.