03-25-2022 01:18 AM
In my environment, firepower1140(ASA appliance mode) e1/2 is connected to Catalyst 2960S Gigabit port.
And we find the following occurence.
e1/2(auto/auto)-2960S(auto/auto) ->firepower port status : up(1G/Full)
e1/2(100/Full)-2960S(auto/auto) ->firepower port status : up(100/Full)
e1/2(100/Full)-2960S(100/Full) ->firepower port status : not connect
e1/2(auto/auto)-2960S(100/Full) ->firepower port status : up(100/half)
e1/2(100/auto)-2960S(100/Full) ->firepower port status : up(100/half)
I wonder why 1/2(100/Full)-2960S(100/Full) is not connet.
Is there any suggestion ?
03-25-2022 02:18 AM
what does it show on the switch interface thats connect to the Firewall?
03-25-2022 05:57 AM - edited 03-25-2022 06:17 AM
Thank you for your response.
I check switch status connected to firepower.
---------------------------------------
e1/2(auto/auto)-2960S(auto/auto)
->
firepower port status : up
Auto-Duplex(fullDuplex), Auto-Speed(1gbps)
switch port status
a-full a-1000 10/100/1000BaseTX
---------------------------------------
e1/2(100/Full)-2960S(auto/auto)
->firepower port status : up(100/Full)
Full-Duplex(fullDuplex), 100 Mbps(1gbps)
switch port status
Gi1/0/22 a-full a-1000 10/100/1000BaseTX
*Firepower port status and switch port status are not same.
---------------------------------------
e1/2(100/Full)-2960S(100/Full)
->firepower port status : not connect
Ethernet1/2 manual down down
switch port status
Gi1/0/22 full 100 10/100/1000BaseTX
---------------------------------------
e1/2(auto/auto)-2960S(100/Full)
->firepower port status : up(100/half)
Auto-Duplex(halfDuplex), Auto-Speed(100mbps)
switch port status
Gi1/0/22 full 100 10/100/1000BaseTX
---------------------------------------
e1/2(100/auto)-2960S(100/Full)
->firepower port status : up(100/half)
Auto-Duplex(halfDuplex), 100 Mbps(100mbps)
switch port status
Full-duplex, 100Mb/s
---------------------------------------
I doubt this phonomenon is bug(CSCwa31696 FDM: ifc down when configuring Speed/duplex to fixed 100/Full interface).
But I can't check above bug for not having enough authentication...
03-25-2022 09:30 AM
Hey i cant not see this bug. its not loading
03-25-2022 10:25 AM
I also can't see the bug whole information(CSCwa31696).
But you can check the bug information from Bug Search Tool by searching for "ifc down when configuring Speed/duplex to fixed 100/Full interface".
We cannot see the whole information, but can grasp the summarized information.
03-26-2022 12:31 PM
The only 1 interface is configured as 1G but rest on 100MB. any reason why is that? Have tried the not working port to another switch? consider changing the cable to switch to firewall (not working port).
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide