Firepower User Agent can not connect with Firepower Management Center

[lupingyao]

Hi Cisco Support,

I have Problem with Firepower User Agent, when I want to add a Firepower Management Center in Agent, then I will get the Error"can not connect to the Firepower Management Center". you can find the Error in Attachment! I have already added the User Agent in FMC.

My Firepower Management Center Version is 6.0.0.1

and my User Agent 2.3(10)

[yogdhanu]

Hi

Please confirm if the port 3306 is open between your firepower management center and the PC where you have user agent installed. It could be that endpoint security software on your PC might also block this.

Also , please make sure user agent IP is added in FMC>system>integration>identity sources

Thanks

Yogesh

[lupingyao]

Hi yogdhanu,

could you tell me how can I open the tcp 3306 in FMC? The user agent ip is added in FMC...

[yogdhanu · Accepted solution]

Hi

You don't need to manually open it. if you have added the agent in FMC , then it should be open by default. What I meant was to make sure there is no intermediate firewall between FMC and agent. 

You can do packet capture on FMC cli and check if traffic is reaching there.

>tcpdump -i eth0 port 3306

[johnsonrm@zoominternet.net]

Removed.

[dszendol]

Hi

I need root password do run this command.

Do You know the SU password for FMC?

regards

[Pujita Patni]

Hi,

The root password is the same as the login password you use to login to the CLI of the device.

Thanks,

Pujita

Rate if it helps !

[Gabrielm1]

port 3306 is open between user agent and FMC.

23:15:10.477360 IP srv-it-kenn.corp.cbha.org.50128 > firepower.corp.cbha.org.3306: Flags [.], ack 1, win 513, length 0
23:15:10.477632 IP firepower.corp.cbha.org.3306 > srv-it-kenn.corp.cbha.org.50128: Flags [P.], seq 1:83, ack 1, win 229, length 82
23:15:10.517646 IP srv-it-kenn.corp.cbha.org.49938 > firepower.corp.cbha.org.3306: Flags [.], ack 231, win 509, length 0
23:15:10.533297 IP srv-it-kenn.corp.cbha.org.50128 > firepower.corp.cbha.org.3306: Flags [.], ack 83, win 512, length 0
23:15:20.485468 IP firepower.corp.cbha.org.3306 > srv-it-kenn.corp.cbha.org.50128: Flags [F.], seq 83, ack 1, win 229, length 0
23:15:20.485797 IP srv-it-kenn.corp.cbha.org.50128 > firepower.corp.cbha.org.3306: Flags [.], ack 84, win 512, length 0

Now what?  Still shows unavailable in user agent