Solved: Firepower next generation firewall

SS2020 · ‎01-09-2023

Hello All,

I am just doing some labs trying to build some FTD-NG standard firewall and managed through the browser it self not through the FMC.

however when try https://10.1.1.1 it won't work, it times out.

Note i can ping the FTD from my pc and from FTD to PC.

this lab been built in EVE NG.

Will this issues be caused by the licenses?

any help or suggestion I appreciated.

please see the screen shot of the CLI.

Also the i can access it through the putty as well.

many thank you.

Star

Rob Ingram · ‎01-09-2023

@SS2020 that's NOT the FTD image, it's the NGIPS image - so you cannot manage the NGIPS image locally, you need to manage using the FMC.

You need to get the FTD image which you can manage locally.

Rob Ingram · ‎01-09-2023

@SS2020 from the CLI run "show managers" does it confirm "Managed locally"?

SS2020 · ‎01-09-2023

Hello Rob,

There is no managers configured.

Rob Ingram · ‎01-09-2023

@SS2020 ok, so the FTD is not configured for local management. From the CLI run "configure manager local"

To answer your other question, it should not be a licensing problem as at a minimum you'd have a base license.

SS2020 · ‎01-09-2023

Hello Rob,

I have tried few times this command is not working,

I tried to user

configure manger local

configure manger local cisco

configure manger add local

none of them working but when i try to add it to the FMC with configure manager add 10.1.1.10 cisco it's working fin.

Not sure what i am missing.

Rob Ingram · ‎01-09-2023

@SS2020 try "configure manager delete" then "configure manager local"

I assume this device is new and not been configured, as you will lose the configuration.

SS2020 · ‎01-09-2023

Hello Rob,

yes the device is new.

this commands are still not working.

Rob Ingram · ‎01-09-2023

@SS2020 what image and version are you using in EVENG?

Type ? and what commands are available?

SS2020 · ‎01-09-2023

I'm using EVENG community and see below.

Rob Ingram · ‎01-09-2023

@SS2020 I was referring to the FTD image you are using in EVENG?

What commands are available from the FTD CLI?

SS2020 · ‎01-09-2023

Hello Rob,

Rob Ingram · ‎01-09-2023

@SS2020 that's NOT the FTD image, it's the NGIPS image - so you cannot manage the NGIPS image locally, you need to manage using the FMC.

You need to get the FTD image which you can manage locally.

SS2020 · ‎01-09-2023

OW sorry Rob, my bad, sorry for confusing you. I didn't know that.

I have powered up the FTD and i will let you know how it goes.

Many Many thank you for your time and help.

SS2020 · ‎01-09-2023

Hello Rob,

you were right now the ftd is working through the https but now i get a different error.

Rob Ingram · ‎01-09-2023

@SS2020 perhaps the services haven't started yet, try again after a while.