Firepower1140 interface status

[Toshiyuki Yamashita]

In my environment, firepower1140(ASA appliance mode) e1/2 is connected to Catalyst 2960S Gigabit port.

And we find the following occurence.

e1/2(auto/auto)-2960S(auto/auto) ->firepower port status : up(1G/Full)

e1/2(100/Full)-2960S(auto/auto) ->firepower port status : up(100/Full)

e1/2(100/Full)-2960S(100/Full) ->firepower port status : not connect

e1/2(auto/auto)-2960S(100/Full) ->firepower port status : up(100/half)

e1/2(100/auto)-2960S(100/Full) ->firepower port status : up(100/half)

I wonder why 1/2(100/Full)-2960S(100/Full) is not connet.

Is there any suggestion ?

[Sheraz.Salim]

what does it show on the switch interface thats connect to the Firewall?

[Toshiyuki Yamashita]

Thank you for your response.

I check switch status connected to firepower.

---------------------------------------
e1/2(auto/auto)-2960S(auto/auto)
->

firepower port status : up
Auto-Duplex(fullDuplex), Auto-Speed(1gbps)

switch port status
a-full a-1000 10/100/1000BaseTX
---------------------------------------

e1/2(100/Full)-2960S(auto/auto)
->firepower port status : up(100/Full)

Full-Duplex(fullDuplex), 100 Mbps(1gbps)

switch port status

Gi1/0/22 a-full a-1000 10/100/1000BaseTX

*Firepower port status and switch port status are not same.

---------------------------------------
e1/2(100/Full)-2960S(100/Full)
->firepower port status : not connect

Ethernet1/2 manual down down

switch port status
Gi1/0/22 full 100 10/100/1000BaseTX

---------------------------------------
e1/2(auto/auto)-2960S(100/Full)
->firepower port status : up(100/half)
Auto-Duplex(halfDuplex), Auto-Speed(100mbps)

switch port status
Gi1/0/22 full 100 10/100/1000BaseTX
---------------------------------------
e1/2(100/auto)-2960S(100/Full)
->firepower port status : up(100/half)
Auto-Duplex(halfDuplex), 100 Mbps(100mbps)

switch port status
Full-duplex, 100Mb/s
---------------------------------------

I doubt this phonomenon is bug(CSCwa31696 FDM: ifc down when configuring Speed/duplex to fixed 100/Full interface).

But I can't check above bug for not having enough authentication...

[Sheraz.Salim]

Hey i cant not see this bug. its not loading

[Toshiyuki Yamashita]

I also can't see the bug whole information(CSCwa31696).

But you can check the bug information from Bug Search Tool by searching for "ifc down when configuring Speed/duplex to fixed 100/Full interface".

We cannot see the whole information, but can grasp the summarized information.

[Sheraz.Salim]

The only 1 interface is configured as 1G but rest on 100MB. any reason why is that? Have tried the not working port to another switch? consider changing the cable to switch to firewall (not working port).