topic Re: FDM1120 Management Interface IP Address in Network Security

FDM1120 Management Interface IP Address

ahmad-jarraho — Tue, 05 Nov 2024 19:59:32 GMT

I have two cisco 1120 firepower running on (HA)

i configure the Management ip on both FDM but i cant access ftd gui and also i cant ping able to the ftd. I can access the FDM by Reaching the default gateway on my inside on https:// and i give managment interface an ip on the same subnet that i have on inside.

And I added the inside subnet under management access management interface protocol https.

please help me what the problem is

Re: FDM1120 Management Interface IP Address

Rob Ingram — Tue, 05 Nov 2024 20:06:23 GMT

@ahmad-jarraho please provide the output of "show network" from the CLI of the FTD, this will confirm the management interface settings. From the CLI of the FTD run ping system <default gateway> - what is the result? Is the switchport interface configured in the correct VLAN?

Re: FDM1120 Management Interface IP Address

balaji.bandi — Tue, 05 Nov 2024 20:07:58 GMT

FDM is on box management that means you are access FTD

not sure you not able to access FTD ?

check below document and reference :

https://www.cisco.com/c/en/us/support/docs/security/secure-firewall-threat-defense/221012-configure-ftd-high-availability-using-fd.html

Re: FDM1120 Management Interface IP Address

ahmad-jarraho — Tue, 05 Nov 2024 20:32:38 GMT

Hello Rob!

Thank you very much for reply who is the output you asked for

Re: FDM1120 Management Interface IP Address

Rob Ingram — Tue, 05 Nov 2024 20:26:03 GMT

@ahmad-jarraho the output says the link is down. Check the cable is connected correctly and ensure the switchport on the switch is up.

And run the ping command from SSH, not the CLI console from FDM.

Re: FDM1120 Management Interface IP Address

ahmad-jarraho — Tue, 05 Nov 2024 20:25:54 GMT

Sorry but I don't understand what do you mean by the link is down should I connect the physical management interface to the switch?

Re: FDM1120 Management Interface IP Address

Rob Ingram — Tue, 05 Nov 2024 20:29:05 GMT

@ahmad-jarraho yes, the management interface is a physical interface that would need to be connected to the network, in the correct VLAN.

Re: FDM1120 Management Interface IP Address

jroy777 — Mon, 19 May 2025 21:13:20 GMT

Can I have both the management interface and the inside interface on the same subnet?

Re: FDM1120 Management Interface IP Address

Rob Ingram — Tue, 20 May 2025 05:50:21 GMT

@jroy777 yes you can have the management interface and the data interface in the same subnet. FYI, the data (inside) interface can also be the management interface, you do not need to use the dedicated management interface.