FTD to remote FMC register problem

[sherali mamatkarimov]

i am trying to register my FTD to my remote FMC by this guide with manual method

https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/fp2100/firepower-2100-gsg/ftd-fmc-remote.html#task_imq_yw3_b3b

but when i am adding my FTD to FMC i got error  Registration timed out. Please check connectivity and registration id

I have configured outside static ip address in FTD as managment interface and also registration id and nat id. FMC is behind the nat and I can ping FTD outside ip. 

 On FTD i configured manager with command "configure manager add DONTRESOLVE secret123 natid123" as i dont have directly access to FMC. I tried to registrer FTD with IP and NAT ID both, without IP only with NAT ID and also without NAT ID only with static IP but everytime fails. Can you help me?

[MHM Cisco World]

> configure manager add DONTRESOLVE Cisco-123 nat123

use this in FTD and check 
MHM 

[sherali mamatkarimov]

I have configured as you have write but fails, i have added FTD without IP address but with register and nat id

[MHM Cisco World]

One side must not use IP here fmc behind NAT so did you try above command ? Dis you use same key and NAT-ID in fmc side ?

MHM

[sherali mamatkarimov]

Of course using same key and NAT ID yes i tried do as you have written))

[MHM Cisco World]

then did you use 
configure network management-data-interface<<- please read about this command before you apply it 
https://www.cisco.com/c/en/us/td/docs/security/firepower/670/configuration/guide/fpmc-config-guide-v67/device_management_basics.html

again read about this command before apply 
thanks 
MHM

[sherali mamatkarimov]

As said in this guide https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/fp2100/firepower-2100-gsg/ftd-fmc-remote.html#task_imq_yw3_b3b

 1 step I am configuring my private static ip in initial setup with default route by data interfaces

2 step i am typing  > configure network management-data-interface 

Ether 1/1 outside interface 

Ip mask gw of my ISP 

3 step i am typing configure manager add DONTRESOLVE Cisco-123 nat123

[MHM Cisco World · Accepted solution]

 there are two tunnel one is control and other is event 
so 
point to check 
1- Check the Ver. is compatible or not between FTD and FMC
FTD /ngfw/var/log/messages file: 
2- share this 

> capture-traffic

Please choose domain to capture traffic from:
  0 - eth0
  1 - Global

Selection? 0

Please specify tcpdump options desired.
(or enter '?' for a list of supported options)
Options: -n host <FMC IP>

 MHM

[sherali mamatkarimov]

Thank you for answer but i decided to manage remote office FTD bt FDM, I configured all but i have one small problem i will open new discussion for it.