topic Re: FirePower2110 interface error and ping issue in Network Security

FirePower2110 interface error and ping issue

jack lee — Fri, 21 Feb 2020 15:30:31 GMT

hello, Now, we deploy the FirePower2110 to replace ASA5525, we find the following situations, from the AScentlink,we can ping pass 10.229.31.17(primary device firepower 2110), but from 2960 switches(connect the internet) ，we can't ping pass 10.229.31.17. What is more confusing，from the 2960, we can ping pass the 10.229.31.18(secondary device firepower 2110). Other confusing, the FMC has the following the alarm at the same time in figure 1,the topology is figure 2. other question,I want to know where can i configure the SSL VPN in FMC 6.2.2?

Re: FirePower2110 interface error and ping issue

jack lee — Tue, 13 Mar 2018 10:12:52 GMT

Looking forward to your reply， thank you!

Re: FirePower2110 interface error and ping issue

Marvin Rhoads — Wed, 14 Mar 2018 05:02:02 GMT

I'm not sure about your pinging issue. It could be any number of things depending on your switch and routing setup.

Re the SSL VPN, you configure it under Devices > VPN > Remote Access.

Re: FirePower2110 interface error and ping issue

jack lee — Wed, 14 Mar 2018 06:39:06 GMT

hi Rhoads, we check the switch and other device, but they have no problem. The FMC has the alarm."the interface E1/4 is not receiving any packets" Thank you

Re: FirePower2110 interface error and ping issue

Marvin Rhoads — Wed, 14 Mar 2018 07:17:32 GMT

The FTD in the alarm is listed as 10.229.20.31. That address doesn't appear on your network drawing.

If it is indeed the same as FTD_01 on your drawing, what does the connected switchport on 2960_01 (gi1/0/22) indicate? Is it sending packets?