topic Re: FTD 2110 FXOS in Network Security

FTD 2110 FXOS

behrouz6408021 — Sun, 26 May 2019 20:01:06 GMT

Hi everyone ...

i have a Cisco Firepower 2110 , that is running FTD 6.3 with FXOS Version 2.4(1.243)

i would like to upgrade to 6.4 , but when my FMC upgrade to 6.4 version , it cannot detect my FTD with 6.3 version

FTD 2110 is offline in fmc

i think this problem is because my FTD FXOS version is lower than the FMC compatibility for detect FTD .

how i can upgrade Firepower 2110 FXOS from 2.4 to 2.6 version ?

i know FXOS in FTD 2100 upgraded when major and minor upgrade is done in Firepower .but my FMC cannot detect ftd with 2.4 version ...

Re: FTD 2110 FXOS

balaji.bandi — Sun, 26 May 2019 21:10:23 GMT

6.4.X release noted clearly mentioned

Requires FXOS 2.6.1.157 or later build.

Separate upgrade. Upgrade FXOS first.

here is the upgrade document :

https://www.cisco.com/c/en/us/td/docs/security/firepower/fxos/fxos261/release/notes/fxos261_rn.html#pgfId-141076

we have done some upgrades on 4100, Note : i have not seen any document mentioning 2100 model, so better check before you upgrade

Re: FTD 2110 FXOS

Abheesh Kumar — Mon, 27 May 2019 06:52:08 GMT

Hi,

I don't suspect its an issue with FTD2100 FXOS version, as per the 6.4 release note

6.4 FMC can able to manage devices running older version upto 6.1

Please check is there any reachability issue between your FMC & FTD.

Version 6.4.0 Manager-Device Compatibility

Firepower Management Center
Version 6.4.0 FMC	can manage	Version 6.1 through 6.4.0.x devices
Version 6.4.0 devices	require	Version 6.4.0 FMC
Firepower Device Manager
Version 6.4.0 FDM	can manage	one FTD device
ASDM
Version 7.12.1 ASDM	can manage	Version 5.3.x through 6.4.0 ASA FirePOWER modules
Version 6.4.0 ASA FirePOWER modules	require	Version 7.12.1 ASDM

Hope This Helps

Abheesh

Re: FTD 2110 FXOS

behrouz6408021 — Mon, 27 May 2019 09:25:23 GMT

it is log for this problem .

when i want add ftd to FMC ...

i installed another fmc with version 6.3 and i can register ftd to fmc . but with fmc 6.4 i cannot

Re: FTD 2110 FXOS

Abheesh Kumar — Mon, 27 May 2019 10:02:28 GMT

hi
can you share the output for below command from ftd2110
show managers

Re: FTD 2110 FXOS

Abheesh Kumar — Mon, 27 May 2019 10:05:35 GMT

Are the FTD & FMC is in same subnet range..??
Are you able to ping FTD from FMC...??

Re: FTD 2110 FXOS

behrouz6408021 — Mon, 27 May 2019 11:05:18 GMT

Hi Abhessh

no , they are in different subnets but they can reach to each other and no any problem about connectivity

there is no any firewall or ACL or any things between them .

there is no any NAT device between them

Re: FTD 2110 FXOS

Abheesh Kumar — Mon, 27 May 2019 12:50:33 GMT

Hi,

Try deleting the manager from FTD and add again.

configure manager delete

configure manager add 172.16.10.210 SecretKey

then check show manager shows FMC IP

Then goto FMC, add FTD management IP and SecretKey

Hope This Helps

Abheesh