initial configure firepower 2110 for FMC

[Roy Lee]

Hi,

I am configuring a firepower 2110 following the cisco document.

https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/fp2100/ftd-fmc-2100-qsg.html

FTD version is 6.2.2-81.

I would like to configure the management interface to the same subnet of inside interface.

Management IP: 192.168.1.15.

Subnet: 255.255.255.0

DNS: 192.168.1.1

Gateway: data-interfaces

(My FMC IP is 192.168.1.138)

When I try to connect to FMC by input the command: Configure manager add 192.168.1.138 Notmen123456

It return error: The management IP address is currently using the data interfaces as the gateway. This is not supported when you manage the device remotely with Firepower Management Center. You must first use the "configure network ipv4 manual" or "configure network ipv6 manual" commands to configure an explicit gateway on the management network, then come back and run "configure manager add" command again.

Any Idea? I just want to use the 192.168.1.x network to manage the FTD and FMC.

Thanks,

Roy

[Rahul Govindan]

Do you have a L3 switch on the 192.168.1.x subnet? Can you try setting it to that instead of the FTD interface ip address?

[Roy Lee]

Hi Rahul,

OK, I change the maganagement interface gateway to 192.168.1.8 which is an internal router, now I can manage the FTD by FMC.

I have connected eth 1/1 to WAN network, and eth 1/2 to inside network. 

While eth 1/1 port both "L" and "S" LED are flashing normally.

eth 1/2 (inside) port seems not connected, there are 2 small LEDs on each port, the "L" LED is off and "S" LED is On (but not flashing). The switch port connected to eth 1/2 are flashing as normal.

Then I enabled and assigned a public IP to eth 1/1, 192.168.1.7 to eth 1/2, through FMC and deploy successful. But the eth 1/2 port "L" LEDs is still off.

Any idea?

Thanks,

Roy