cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
366
Views
10
Helpful
10
Replies
Participant

FTD 750 install - cant login now

Hi,

I have built an FTD 750 but not added it to the FMC Manager yet.  I only did the interfaces and the routing table.  I still have the default mgt interface of 192.168.45.45  But now i cant log back into it on the webpage.  I am getting these errors

 

https://192.168.45.45/login.cgi

Forbidden- You don't have permission to access /login.cgi on this server.

 

Service Unavailable- The server is temporarily unable to service your request due to maintenance downtime or capacity problems. Please try again later.

 

I can login via ssh but it goes straight to # prompt

 

Why is their no > shell prompt

 

Any ideas are welcome

firepower#

2 ACCEPTED SOLUTIONS

Accepted Solutions
Hall of Fame Master

Re: FTD 750 install - cant login now

Are you plugging into the Management 1/1 interface directly?

We would generally recommend a new setup to follow the Quick Start Guide here:

https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/fp2100/ftd-fdm-2100-qsg.html

Hall of Fame Master

Re: FTD 2110 Setup and Login

Try this:

 

In order to enable the FDM On-Box management on the firepower 2100 series proceed as follows.

1. Console access into the FPR2100 chassis and connect to the FTD application.

firepower# connect ftd
>

2. Configure the FTD management IP address (if you want to change it).

>configure network ipv4 manual <address> <netmask> <gateway>

3. Configure the management type as local.

>configure manager local

4. Configure from which IP addresses/subnets the On-Box management access to the FTD will be allowed.

>configure https-access-list 0.0.0.0/0

5. Open a browser and https into the IP address you configured to manage the FTD, this will open the FDM (On-Box) manager.

Source: https://www.cisco.com/c/en/us/support/docs/security/firepower-2100-series/213519-configure-fdm-firepower-device-manageme.html

10 REPLIES 10
Hall of Fame Master

Re: FTD 750 install - cant login now

I'm not familiar with the model "FTD 750". Can you confirm what hardware you're working with?

When you say you've "built (it)", what steps did you take?

Participant

Re: FTD 750 install - cant login now

Hi

Its Cisco Fire Linux OS v6.2.2 (build 11)
Cisco Firepower 2110 Threat Defense v6.2.2 (build 81) - so not sure where i was getting the 750 from

 

To build it i login to the default mgt address 192.168.45.45, put in the 3 interfaces i need and also the routing table.  When i logout of the webpage i can no longer get back into .. 45 even though i never changed it 

Hall of Fame Master

Re: FTD 750 install - cant login now

Are you plugging into the Management 1/1 interface directly?

We would generally recommend a new setup to follow the Quick Start Guide here:

https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/fp2100/ftd-fdm-2100-qsg.html

Participant

Re: FTD 750 install - cant login now

Hi,

I went through the document and setup my interfaces & routing but again i cant login

I havent plugged the into my network yet - i am just trying to login locally from my pc- is that the issue

Current IP Addresses:
Interface                Name                   IP address      Subnet mask     Method
Ethernet1/1              outside               192.168.3.100  255.255.255.0   manual
Ethernet1/2              inside                 172.19.200.100   255.255.255.0 manual
Ethernet1/4              management      192.168.4.100  255.255.255.0   manual

i have tried all interfaces including the 192.168.45.45 diagnostic interface

 

I need to get in and then add it to the FMC manager

Hall of Fame Master

FTD 2110 Setup and Login

How are you connecting your local PC - is it plugged directly into the appliance's Gigabit Ethernet management interface?

Are you able to connect to the serial console?

For reference those are as shown below:

FP2110.PNG

Participant

Re: FTD 2110 Setup and Login

Martin,

 
I have tried plugging back into the Mgt interfaces (2) using 192.168.45.45 but it wont let me back in
Its saying error 503 - service unavailable. 
The server is temporarily unable to service your request due to maintenance downtime or capacity problems. Please try again later.
 
serial console is fine but it goes direct to this prompt #  and not >
commands are limited
but i can ssh into the 192.168.45.45 interfaces
 
show running config - all my interfaces are gone
 
It looks like all my routing and interfaces are not saving and hence when i power rack it remotely and power back on its why nothing is working
Highlighted
Hall of Fame Master

Re: FTD 2110 Setup and Login

When you ssh to your management address, please check and share the results of "show managers" command.

Participant

Re: FTD 2110 Setup and Login

> show managers
No managers configured.

 

Maybe i have a faulty device or something

Hall of Fame Master

Re: FTD 2110 Setup and Login

Try this:

 

In order to enable the FDM On-Box management on the firepower 2100 series proceed as follows.

1. Console access into the FPR2100 chassis and connect to the FTD application.

firepower# connect ftd
>

2. Configure the FTD management IP address (if you want to change it).

>configure network ipv4 manual <address> <netmask> <gateway>

3. Configure the management type as local.

>configure manager local

4. Configure from which IP addresses/subnets the On-Box management access to the FTD will be allowed.

>configure https-access-list 0.0.0.0/0

5. Open a browser and https into the IP address you configured to manage the FTD, this will open the FDM (On-Box) manager.

Source: https://www.cisco.com/c/en/us/support/docs/security/firepower-2100-series/213519-configure-fdm-firepower-device-manageme.html

Participant

Re: FTD 2110 Setup and Login

Marvin,

 

This worked well for me.  I reset the FTD again but this time i went straight into these commands but i only setup the Mgt (Diagnostic) port on my management network. 

 

Then i added this command to manage the device remotely 

configure manager add 192.0.2.2 123456

Now i can connect to it from my FMC which is on the same network and now i have been able to setup the interfaces, routing tables, and policy.  

 

thanks again

Kevin