gateway ip address can take FTD1- 4112 and licence

[Dhikra Marghli]

Hello ,

I have two switch  cisco layer 3 have a protocole HSRP ..and .these two switches are connected to the two ftd 4112 cisco .

we are VLAN 254 and 

interface Vlan254
Edge-To-LAN#
 ip address 192.168.254.251 255.255.255.0
 standby 254 ip 192.168.254.250
standby 254 preempt

My fisrt  question :  which gateway ip address can take FTD1- 4112 and  FTD2-4112 ??: @ip of  port physical or virtual @ip for HSRP  ??

second question :

when FMC 4600  have a licence permanent and manage both ftd ... my question : does both FTD 4112  require Licence ??

i wait a reply and answer for my two question from  expert security .??

Regards

[Rob Ingram · Accepted solution]

@Dhikra Marghli you configure the FTD to use the standby IP address (192.168.254.250) as it's next hop gateway.

The FTD comes with a base license, that include basic firewalling, NAT features.....if you wish to use the Threat, URL Filtering, Malware defense or RAVPN then you need to purchase additional licenses.

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/admin/720/management-center-admin-72/system-licenses.html?bookSearch=true

HTH

[Dhikra Marghli]

BUT  i talk about Licence FTD 4112 !!! because FMC 4600 is autorized in account smart 

[Rob Ingram · Accepted solution]

@Dhikra Marghli I was referring to the FTD software running on the FPR-4112 hardware comes with the base license, so you can run the basic features of a firewall without purchasing an additional license (unless you require those additional features, as per the link provided).

[Dhikra Marghli]

Ok...Thanks  for your help  and your support