Firepower 2130 using Fiber ports as WAN Ports

[amit.it]

Hi,

Can anyone confirm if SFP+ ports on Cisco Firepower FTD 2130 can be used as OUTSIDE (WAN) port and INSIDE (LAN) port

I don't wanna use copper ports at all.

[Marvin Rhoads]

As long as the up-stream device has a compatible transceiver then sure you can use the SFP+ interfaces for all of your connections.

I do believe only LAN PHY transceivers are supported so if you had something truly "WAN" (like a G.729 OTN connection) then it might not work. But any normal 10 Gbps or 1 Gbps LAN should work given the right transceivers.

[amit.it]

Hi Marvin,

Thanks for your reply,

I have a fiber leased line from the ISP terminated on Cisco 3850 12S Switch.

Cisco 3850 is connected to Cisco FTD 2130. All transceivers are Cisco made.

On Firepower FTD 2130, when I use copper port as WAN and any other port as LAN, Internet is accessible but does not work if any SFP port on FTD 2130 configured as WAN.

[Marvin Rhoads · Accepted solution]

There's no documented limitation in that regard.

The configuration guide does note that if you add an optional network interface after initial bootstrap that you need to reboot the system for it to initialize properly.

https://www.cisco.com/c/en/us/td/docs/security/firepower/623/fdm/fptd-fdm-config-guide-623/fptd-fdm-interfaces.html#concept_6940083A55184D009B6406EF167C9DD4