hi,i recently upgraded a cisco ASR from 3.16.x to 16.12.x and noticed AAA didn't work afterwards. i was able to login using the local user but unable to execute any command. Username: adminPassword: <LOCAL USER PW> ASR#ASR#sh run | s aaaASR#ASR#sh ru...
Forum Posts
HI ALL, I have bought the firepower 1010 to act as gateway for my thirdparty item going to be connect with our network our network based are 10.13.x.x and the outside are 192.168.20.x and 192.168.4.x can the firepower do it using FDM. can we have the...
Resolved! CDO import configuration
Hello, I would like to import in the CDO an ASA configuration in order to assign it to FTD 2120 running ASA image. I have found the onboarding of devices but I would like to only have the configuration of the device in the CDO? Is that possible? Reg...
Hi, we're using ASA5585x SSP40 with Firepower Co-processor. The Firepower software is running in version 6.4.11-11. Today at ca. 8 o'clock AM local time I upgraded the VDP database to version 340 manually in my Firepower Management Center. It took on...
Resolved! How can I access the Internet without opening the firewall by URL in Firepower Management Center?
Hi teams, I have some questions. I know FMC needs open the firewall URL for internet access(rule download, SM licensing ..).When I see FMC guide, It is just displayed url such as 'www.cisco.com'(please see below picture). It is simple and best.But, H...
Hello everyone,I need to downgrade an old PIX 535 from pix804-48 version to 6.3.4, but i get this message: Image must be at least 7-0-0-0 error in file ... Could someone please provide me at least version 7.0.0?Thanks in advance Sirio
Hello, I have an FTD managed through FDM. I have two S2S VPNs using VTI and would like to do some path selection. I created two route-maps each matching a specific prefix list and each has BGP weight and local preference. I see that there is an optio...
Hello, I'm facing issue related to NTP from ISP to inside host TOPOLOGY: ISP modem--->Outside_Int--->ASA--->Inside_Int ACL:access-list VLAN100_IN extended permit tcp any any eq wwwaccess-list VLAN100_IN extended permit tcp any any eq httpsaccess-list...
Is it me or is this the most unintuitive, undecipherable, difficult to use and maddening configuration page ever? Can anybody shed some light on how this page is supposed to work? Thanks
Resolved! FTD Smart Token
Hello,Question about the smart token for my FTD 2130.I have 2 FTD to create a cluster A/P. How many tokens do I need? One for each FTD or not?Thank you.
Resolved! FMC: High memory and swap utilization
Hello everybody,our monitoring system showed a warning because high memory andswap utilization of customers FMC 6.6.0.1 (running on VMware).I went to the expert mode and the top command showed the following:root@M-Firesight:/Volume/home/admin# top to...
Hi,I have upgraded the FTD software on a couple of ASA 5508-X from version 6.3 -> 6.6.0.1After the upgrade I noticed the following warning message in the CLI. FPGA UPGRADE Version : 2.4FPGA GOLDEN Version : unavailableROMMON Version : 1.1.13WARNING: ...
Resolved! Firepower 4140 Chassis Port Channel help
Dear Community, I am attempting to create a couple of port channels on my 4140 appliances. I tried to do this through the FMC but it appears I may need to do it via the Chassis Manager? I am trying to create the port channels via the Chassis Manager,...
Resolved! cannot ssh an interface: deny IP spoof
Hi all,I thought I have fixed one problem but actually I have created another. I got an ASA 5508, connected to AWS cloud via AWS direct connect, which uses a cross-connect in the datacenter, and communicates via BGP (this is not a VPN). AWS net: 10....
Resolved! Account creation within CDO
Hello, I have the first account for CDO. I would like to create another one in order for another person to have access. Could I do that via CDO?Is there a guide? Thanks and regards, Konstantinos
