cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
207
Views
0
Helpful
3
Replies

Add Cisco FTD to Azure Cloud Hosted FMC

ralpho1
Level 1
Level 1

Hello Together,

we installed a new FMC in Azure for some testings. Now I stuck because how can I add a physical FTD to this FMC in Azure Cloud? I tried it form Inside an office with the normal command "configure manager add ....", but it won´t work. The Problem is I do not have a public IP which I can assign to the FTD for joining it. Are there any other ways?

Best Regards

Ralph 

1 Accepted Solution

Accepted Solutions

balaji.bandi
Hall of Fame
Hall of Fame
  • The FMC must be able to reach the IP address of the FTD's data interface over TCP port 8305.
> configure manager add <FMC-IP-Address> <registration-key>

> configure network management data-interface <interface-id>

Check whether you can reach the IP address from the FMC IP using ping. 

What IP address did you get for FTD? Is that NAT IP reachable from the Internet, and is the public IP reachable from the Internet?

Check some reference guide :

https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Device_Management_Basics.html

BB

=====Preenayamo Vasudevam=====

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

View solution in original post

3 Replies 3

balaji.bandi
Hall of Fame
Hall of Fame
  • The FMC must be able to reach the IP address of the FTD's data interface over TCP port 8305.
> configure manager add <FMC-IP-Address> <registration-key>

> configure network management data-interface <interface-id>

Check whether you can reach the IP address from the FMC IP using ping. 

What IP address did you get for FTD? Is that NAT IP reachable from the Internet, and is the public IP reachable from the Internet?

Check some reference guide :

https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Device_Management_Basics.html

BB

=====Preenayamo Vasudevam=====

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

I think then it must be a NAT Problem. FMC have only Public IP and FW internal. But I guess this should work. Many Thanks.

ralpho1
Level 1
Level 1

but, bye the way. How does it work when we have a Azure hosted FMC? I saw the possibility by add it with "zero Touch provisioning"  But we do have to use "Cisco Security Cloud" Is this a different product or an additional feature?