flexconfig deployment issue

nimalrajphilips — Fri, 21 Feb 2020 14:37:58 GMT

Hello Experts,

I have 2 x FTD2110 configured in HA and they managed by FMCv. Both FMC and FTD are running on code 6.2.2.

I have configured a PBR with 'match list' and a 'set next-hop' command and was able push the flexconfig to FTD successfully and PBR was working fine. later, i have made some other modifications to the config such as ACL, etc and push the new config to the FTD. Once the config deployment is completed, I have noticed the "Set next-hop' command has been removed from the FTD interface configuration. During the config deployment, I have made sure that "flexconfig" has green tick next to it for the config deployment. Hence, no command from flexconfig should have been deployed. The flexconfig is set to "once" and "Append". Anyone has experienced the same issue?

The work around I have is to push the flex config again to push "Set interface" command.

Regards

Nimalraj

Re: flexconfig deployment issue

kwalderhaug — Thu, 08 Nov 2018 15:58:54 GMT

Hi! I found a workaroud that seem to do the trick. Made a FlexConfig just with the route-map and next-hop statement and run this every time.

Re: flexconfig deployment issue

J_Vansen_S — Mon, 05 Aug 2019 03:37:36 GMT

I have the same exact problem too, did anyone else gets to resolve this officially Instead of a workaround of re-deploying the same pbr flexconfig every single time, an ACL change is made?

topic Re: flexconfig deployment issue in Network Security

flexconfig deployment issue

Re: flexconfig deployment issue

Re: flexconfig deployment issue