FMC and LDAP integration specification

[FGR]

LDAP integration works, but!!!

My FMC operates on VMWare in a management network.

I have an inside network with windows domain controllers.

Hence the FMC is not able to connect with the domain controllers.

This gives a lot of pain to specify the AD Realm.  (System / Integration / Realms)

"Download users and groups" is not possible.

Inside Cisco FTD: 192.168.20.0/24 GW 192.168.20.1

URL  192.168.20.19:389

Management ASA: 192.168.30.0/24  GW 192.168.30.1

Cisco FMC:  192.168.30.6

Is it possible to give FMC multiple IP addresses?

[balaji.bandi]

FMC and LDAP integration simple  (from AD point of view you need a Service account, which has privileges to join domain)

https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/215538-configure-firepower-management-center-an.html

[FGR]

Let me clarify.

The integration VPN LDAP works. That's not the issue here.

It's the connection between FMC and the AD server that does not work.

It's a real pain filling in the "Integration" parameters without actually connecting to the AD server.

[FGR · Accepted solution]

I fixed the problem!

I added a NIC in VMware server and connected it to the VM FMC.

After a reboot of the VM it was visible in FMC configuration Management Interfaces.

I gave it an IP address, and now the User Download works perfectly.