FPR 1140 + SFP-10G-SR-C

[jakubgm]

Hi,

I'v got firepower 1140 model and SFP-10G-SR-C.

FPR is connected to the Nexus5548.

Both FPR and Nexus see the SFP.

Slot 1 Port 9:
User Label:
Oper State: Link Down
State Reason: Down
Mac: 04:BD:97:74:8E:0C
Oper Speed: Indeterminate
Oper Duplex: Full Duplex
Xcvr: 10G SR
Xcvr Model: SFP-10G-SR-C
Xcvr Vendor: Cisco Systems, Inc.
Xcvr Serial: CB230421559

Slot 1 Port 10:
User Label:
Oper State: Link Down
State Reason: Down
Mac: 04:BD:97:74:8E:0D
Oper Speed: Indeterminate
Oper Duplex: Full Duplex
Xcvr: 10G SR
Xcvr Model: SFP-10G-SR-C
Xcvr Vendor: Cisco Systems, Inc.
Xcvr Serial: CB230421558

show interface ethernet 1/17 transceiver details
Ethernet1/17
transceiver is present
type is 10Gbase-SR
name is OEM
part number is SFP-10G-SR-C
revision is A
serial number is CB230421555
nominal bitrate is 10300 MBit/sec
Link length supported for 50/125um OM2 fiber is 82 m
Link length supported for 62.5/125um fiber is 26 m
Link length supported for 50/125um OM3 fiber is 300 m
cisco id is --
cisco extended id number is 4

SFP Detail Diagnostics Information (internal calibration)
----------------------------------------------------------------------------
Current Alarms Warnings
Measurement High Low High Low
----------------------------------------------------------------------------
Temperature 40.68 C 80.00 C -10.00 C 75.00 C -5.00 C
Voltage 3.22 V 3.59 V 3.00 V 3.50 V 3.09 V
Current 6.46 mA 15.00 mA 1.00 mA 13.00 mA 2.00 mA
Tx Power -3.13 dBm 0.49 dBm -7.30 dBm 0.00 dBm -6.30 dBm
Rx Power N/A -- 0.49 dBm -11.93 dBm 0.00 dBm -10.91 dBm
----------------------------------------------------------------------------
Note: ++ high-alarm; + high-warning; -- low-alarm; - low-warning

But there is no packet on firepower side. Also on switch I can see that there is no Rx power on transceiver. The fibers are connected properly - check it three times. When changing fiber pair reversing polarisation there is no change in power on SFP on switch side. The cable is new - additionally I have tested 4 different patch cables.

Port on FMC/ FTD is enabled - but link state is down on both sides. There is no portchannel / stp configuration on ports.

Is there any additional settings that should be enabled on firepower to bring up the interface? I know that still can be an L1 issue but I'm out of idea right now.

[Marius Gunnerud]

I suppose that is because you are using 10G SFP+.  The FTD1140 does not support 10G SFP+, it only has support for 1G.  You need to change the SFPs, once you do that this should start working.

https://www.cisco.com/c/en/us/td/docs/security/firepower/1100/hw/guide/hw-install-1100/overview.html

[marce1000]

            >I'v got firepower 1140 model and SFP-10G-SR-C.
 I can't see that SFP being supported on the firepower 1140 from : https://tmgmatrix.cisco.com/?npid=2942

 M.

[jakubgm]

Yes, I saw that ;/

[balaji.bandi]

how far between these devices ?

From nexus side if you look at fibre patch you sure see Light on one of the lead, that shows SFP and Fibre ok

you can also check same thing from FTD side

Note you can also do fibre loop see of the port come up ?

[jakubgm]

Good point with looping fiber on firepower, i will try.

[Marius Gunnerud · Accepted solution]

Looping will not do anything for you as of now.  As I mentioned earlier, you need to swap out the SFPs as the FTD1140 does not support 10G SFP+

[jakubgm]

Thx

[M02@rt37 · Accepted solution]

Hello @jakubgm,

FPR 1140 does not support SFP+.

1150 yes!

https://www.cisco.com/c/en/us/products/collateral/security/firepower-1000-series/datasheet-c78-742469.html

[jakubgm]

Thanks

[balaji.bandi]

Bump - not looked at the compatable matrix good catch.