Unable to add second device - FireSIGHT Mnagament Center

[aoun.ameur1]

Hi All,

I tried to add a second asa5515x to the firesight management center but it indicates that is not allowed 

I have added the manager in cli command line :

conf manager add à.@.@.@.@ cisco123

Is there any suggestion?

[Karsten Iwen]

Which error do you get?

[aoun.ameur1]

I added a NAT ID , the command is as-below :

configure manager add @ip of the firesight cisco123 123456

In firesight, i try to add the device, but it indicates :

Could not establish a connection with sensor. Make sure the registration keys match, that the software versions are compatible, and that the network is not blocking the connection.

[Massimo Baschieri]

I had a similar issue and it turned out that the device was inadvertently powered off during an upgrade, maybe this way the device boots up in an unstable state.

After a  reimaging I was able to regularly associate the asa to defence center.

[aoun.ameur1]

Thanks Massino,

I will try to reimage the software module so !

[Karsten Iwen]

what is the output of the following command?

sh module sfr details

[aoun.ameur1]

I have this :

Card Type: FirePOWER Services Software Module
Model: ASA5515
Hardware version: N/A
Serial Number: FCH19367YGE
Firmware version: N/A
Software version: 5.3.1-152
MAC Address Range: e4aa.5d41.e07c to e4aa.5d41.e07c
App. name: ASA FirePOWER
App. Status: Up
App. Status Desc: Normal Operation
App. version: 5.3.1-152
Data Plane Status: Down
Console session: Ready
Status: Up
DC addr: No DC Configured
Mgmt IP addr: 10.10.100.111
Mgmt Network mask: 255.255.0.0
Mgmt Gateway: 10.10.100.105
Mgmt web ports: 443
Mgmt TLS enabled: true

I have to add two devices in firesight management center. I succed in adding the first with@ip 10.10.100.104 and registration key cisco but i cannot add the second with @ip 10.10.100.105 and a registration key cisco123

[Karsten Iwen]

Are you running at least 9.2(2) on your ASA?

[aoun.ameur1]

Yes , in two ASA , there is ASA9.2(4) version 

[Rishabh Seth]

In case the ASA sfr is behind a NAT device then use the NAT id in "manager add" configuration.

Refer following link:

http://www.cisco.com/c/en/us/support/docs/security/asa-firepower-services/118824-configure-firepower-00.html

Also provide the information requested by Karsten.

Thanks,

R.Seth