topic Re: Unable to add newly deployed FTDv on AWS to Onprem FMC in Network Security

Unable to add newly deployed FTDv on AWS to Onprem FMC

User_80617 — Mon, 02 Dec 2024 17:16:37 GMT

Hello Everyone,

We have recently deployed FTDv on AWS and trying to add it to on-prem FMC. Both are on same latest version. I am trying to add command on FTDv to add FMC, from AWS console but its not taking somehow.

Can someone plese guide urgently to fix this. Or do we need to add FMC ip, key during deployment itself but i didnt see that option anywhere.

Thanks in advanced.

Re: Unable to add newly deployed FTDv on AWS to Onprem FMC

Marius Gunnerud — Tue, 03 Dec 2024 08:10:52 GMT

What command are you using to add the FMC as a manager on the FTDv?

Are you receiving any errors? If yes, please also provide the error output.

Re: Unable to add newly deployed FTDv on AWS to Onprem FMC

ckleopa — Tue, 03 Dec 2024 13:22:39 GMT

In general, try to use the "configure manager add IP passkey nat" values for such environments.

Make sure that both vFTD/vFMC are able to communicate to each other either by ssh into them or ping.

Sometimes small networking configuration issues in AWS where the vFTD / vFMC being in the different subnet or event network by accident can be the root of this problem.

Re: Unable to add newly deployed FTDv on AWS to Onprem FMC

User_80617 — Thu, 05 Dec 2024 06:18:28 GMT

Hi,

Got this fixed by redeploying instance with following in user data field. You also need to ensure proper device index for network interfaces else the interfaces will be tagged wrongly. Interfaces must be tagged in order, index 0: mgmt, 1: diag, 2 outside,3 inside. last 2 can be in any order.

#Sensor
{
"AdminPassword": "<your_password>",
"Hostname": "<your_hostname>",
"IPv6Mode": "dhcp",
"ManageLocally": "No",
"FmcIp": "<IP address of FMC>",
"FmcRegKey":"<registration_passkey>",
"FmcNatId":"<NAT_ID_if_required>"
}