Where to get help for the FMC platform?

[KMNRuser]

I am needing to open up a port that will go from outside to inside for TACACS authentication.  I have created what i beleive is the necessary NAT translation from an available public IP address that our provider has given us in a publicly routable block, and i have also created an ACL.  But for some reason i am not able to see the request coming in.  I am using "telnet X.X.X.X 49" on the device to test, but it never goes open.

Will TAC assist with configurations on FMC?  What would be the proper avenue to get assistance with this item?

Thank you,

KMNRUser

[Rob Ingram]

@KMNRuser from the CLI of the FTD, run packet-tracer to simulate the traffic flow of the TACACS traffic. This should confirm if allowed in the firewall rules and what NAT rule traffic matched. This should provide a clue, provide the output for review.

If you wish hands-on assistance, contact TAC or your Cisco partner, who should be able to troubleshoot this issue.

[KMNRuser]

I do not know how to run packet-tracer from the CLI, only from FMC.  Most of what i have read has indicated that Packet-Tracer must be run from the FMC in this environment.  Is that not correct?  Thank you.

[MHM Cisco World]

Hi friend' 

Using telnet to check port open is not always work'

I will start use 

Capture in outside interface of ftd to see if traffic is hit interface or not.

Inform me about result 

MHM

[KMNRuser]

HI MHM,

The documentation that i have read has indicated i should use packet tracer from the FMC interface, and i have done that.  I must admit it is a bit confusing, as I am not exactly sure what values to use, such as for Source Type value.. and to put in both the Source Port and Destination port.. I know the destination port is "49" but usually the source port is ephemoral if i am not mistaken..ill include a screenshot.

[MHM Cisco World]

Server-inside-ftd-outside-client

You use packet tracer' source port will be outside' 

The destiantion IP will be server (mapped IP not real IP) 

The destiantion port is 49 

The traffic type is TCP (since you use tacacs)

Do above and share result' also check packet capture

MHM