FirePower2110 interface error and ping issue

[jack lee]

hello, Now, we deploy the FirePower2110 to replace ASA5525, we find the following situations, from the AScentlink,we can ping pass 10.229.31.17(primary device firepower 2110), but from 2960 switches(connect the internet) ，we can't ping pass 10.229.31.17. What is more confusing，from the 2960, we can ping pass the 10.229.31.18(secondary device firepower 2110). Other confusing, the FMC has the following the alarm at the same time in figure 1,the topology is figure 2. other question,I want to know where can i configure the SSL VPN in FMC 6.2.2?

[jack lee]

Looking forward to your reply， thank you!

[Marvin Rhoads]

I'm not sure about your pinging issue. It could be any number of things depending on your switch and routing setup.

Re the SSL VPN, you configure it under Devices > VPN > Remote Access.

[jack lee]

hi Rhoads, we check the switch and other device, but they have no problem. The FMC has the alarm."the interface E1/4 is not receiving any packets" Thank you

[Marvin Rhoads]

The FTD in the alarm is listed as 10.229.20.31. That address doesn't appear on your network drawing.

If it is indeed the same as FTD_01 on your drawing, what does the connected switchport on 2960_01 (gi1/0/22) indicate? Is it sending packets?