I'm trying to NAT self generated traffic from an ASA to a AAA server, but the NAT statement isn't catching the traffic.Below is the basic config.The ASA server when authenticating to the AAA server is using the inside IP address of 10.1.1.50, but I ...
Forum Posts
Hi,I'm wondering if it's possible to recover the 'Registration Key' from a Cisco Firepower 1140 FTD (Firewall Device Manager). Or is the only option to run 'configure manager delete' and then create a new one using 'configure manager add [IP xxx.xxx....
I want to be able to ping from switch 1 thru the inside interface to switch 2 connected to the outside interface and vice versa.This is a very basic initial setup to check connectivity thru the FW (Firepower 2130). The switches ( Cisco 3750s) are...
I have some FTDs which are on a FXOS chassis. Is the process to upgrade these the same as uploading the image to the FTD via the FMC or should it be done via the FXOS? I have already upgraded the FXOS chassis' themselves.
Resolved! FMC displays working IKEv2 tunnel DOWN
Hello everybody,our customer is using FMCv 7.2.5.1 and (two) Firepower 1120 (7.0.0.1)for their S2S tunnels (see screen dump). We changed a IKEv1 to IKEv2 tunnel (peer-IP 217.6.229.234). In the VPN > Site To Site overview this working tunnel was displ...
We're trying to migrate backups on our FMC to a new SFTP server. Various other network devices are using the remote storage, but we're not able to get any of our FMCs to backup. We currently have a physical and a virtual running 7.0.1 and a virtual r...
I know FMC is quite picky when it comes to remote storage and that Cisco recommends backing up the FMCs and managed devices to a secure remote location by mounting NFS, SMB or SSH network volumes as remote storages. My FMC are currently on version 7....
Hi everyone, I've been receiving this alert on an FMC (running on VMWare esxi 7.0). Just wonder if there is any steps to rectify this. Thanks.
I have tried and tried, here is a better explanation of what I'm trying to do: I want to be able to ping from switch 1 thru the inside interface to switch 2 connected to the outside interface. It seems that I should be able to create a policy rule...
Hello TogetherI have FMC/FTD and when I create a VPN via Policy Based (crypto Map) and use "Protected Networks" -> "Subnet / IP Address" everything works fine. VPN -> Azure, VPN -> other Companys and our Branch Offices, no Problem.When I use instead ...
Hello, Yesterday I upgraded a customers FMC from version 7.4.2.1 to 7.6. This FMC are manage two different FTD 2130 H/A pairs. After the upgrade was done, the deploy failed on one of the FTD pairs. The FMC also show the device status as disabled. Lo...
Good day everyone.Yesterday, I was working on a Cisco ASA 5512-X Firewall that was being used as a VPN Firewall when suddenly I was disconnected from the ASDM. My SSH session from Putty was closed, and I am unable to get back into any of them. I took...
We were affected several times for an error that prevented us to continue with the deployment of any modifications in our Cisco Firepower, and the error seems to be related to ISE/SGT integration:At the moment, we are using the following workaround: ...
I am getting the following error message when tried to see the received routes from BGP neighbour. I have Cisco ASA 5555 running on 9.3(3). ciscoasa# sh bgp neighbors <peer IP address> received-routes% Inbound soft reconfiguration not enabled on <p...
