FDM1120 Management Interface IP Address

[ahmad-jarraho]

Hi 

I have two cisco 1120 firepower running on (HA) 

i configure the Management ip on both FDM but i cant access ftd gui and also i cant ping able to the ftd. I can access the FDM by Reaching the default gateway on my inside on https:// and i give managment interface an ip on the same subnet that i have on inside. 

And I added the inside subnet under management access management interface protocol https. 

please help me what the problem is 

[Rob Ingram]

@ahmad-jarraho please provide the output of "show network" from the CLI of the FTD, this will confirm the management interface settings. From the CLI of the FTD run ping system <default gateway> - what is the result? Is the switchport interface configured in the correct VLAN?

[ahmad-jarraho]

Hello Rob!

Thank you very much for reply who is the output you asked for 

[Rob Ingram]

@ahmad-jarraho the output says the link is down. Check the cable is connected correctly and ensure the switchport on the switch is up.

And run the ping command from SSH, not the CLI console from FDM.

[ahmad-jarraho]

Sorry but I don't understand what do you mean by the link is down should I connect the physical management interface to the switch? 

[Rob Ingram · Accepted solution]

@ahmad-jarraho yes, the management interface is a physical interface that would need to be connected to the network, in the correct VLAN.

[balaji.bandi]

FDM is on box management that means you are access FTD

not sure you not able to access FTD ?

check below document and reference :

https://www.cisco.com/c/en/us/support/docs/security/secure-firewall-threat-defense/221012-configure-ftd-high-availability-using-fd.html

[jroy777]

Can I have both the management interface and the inside interface on the same subnet? 

[Rob Ingram]

@jroy777 yes you can have the management interface and the data interface in the same subnet. FYI, the data (inside) interface can also be the management interface, you do not need to use the dedicated management interface.