default gateway for FTD with two management interfaces

tato386 — Sun, 15 Feb 2026 04:59:57 GMT

I am using an Internet connected data interfaces to manage an FTD from FMC. This is working as expected. Now I want to add a 2nd interface as a backup management interface using a data interface connected to to my internal network. The 2nd interface needs to use a different gateway than what the primary interface is using to route over a VPN. When I do a "show network" it shows up as using the same gateway as my Internet connected interface. I added it using the GUI and didn't see any option for setting a gateway. I can't find a way to change it from the management CLI either. There does seem to be a way to setup static routes using the CLI which might help here. I have attached the output of the "show network" command for reference.

Thanks

Re: default gateway for FTD with two management interfaces

balaji.bandi — Sun, 15 Feb 2026 10:20:53 GMT

When you configure Manager Access on a data interface, the FTD often defaults to using the existing system default gateway for that interface in its "management" context. Since you cannot change this gateway directly via the "show network" CLI or the basic interface settings, you must use Static Routes within the Cisco Secure Firewall Management Center (FMC) to override this behaviour.

check this guide :

https://www.cisco.com/c/en/us/support/docs/security/secure-firewall-threat-defense/222145-configure-manager-access-on-ftd-from-man.html

Avoid configuring via the CLI, since the FMC overrides some configurations.

You can deploy static content as an example; make changes as needed based on the setup.

To fix the gateway for your secondary management interface (Ethernet1/4):
Configure a Static Route in FMC: Navigate to Devices > Device Management, select your FTD, and go to the Routing tab.
Target the FMC IP: Add a Static Route specifically for the IP address of your FMC.
Interface: Select inf_MySite-inside (Ethernet1/4).
Network: Enter the specific IP of your FMC (or its subnet).
Gateway: Enter the internal gateway IP you want to use for the VPN path. and deploy the configure to FTD and test it

topic Re: default gateway for FTD with two management interfaces in Network Security

default gateway for FTD with two management interfaces

Re: default gateway for FTD with two management interfaces