cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
139
Views
0
Helpful
2
Replies

FPR 1120 interface issues

Artezys79
Level 1
Level 1

Hi All,

I have frp 1120 configure with single interface and 5 subinterface, where one goes into the switch secong goes onto the FTDV 1 and third is to FTDv 2 and other two DMZ on the router. Access policy is proven to be working as it was operational for a few month and suddenly stopped.

The weird thing is that on the physical interface one subinterface, leading to the switch works well however other four have adjacency error, even DMZ cannot be reached from working subinterface.

Actions taken, tried to rebuild subinterfaces but nochange, tried to completely disable access policy with no change. ARP on router only have management, outside, inside and only one operational vlan records.

Spoiler
Drop info:
Result: drop
Input Interface:
LAN1(vrfid:0)
Input Status:
up
Input Line Status:
up
Output Interface:
DMZ(vrfid:0)
Output Status:
up
Output Line Status:
up
Action:
drop
Time Taken:
340728 ns
Drop Reason:
(no-v4-adjacency) No valid V4 adjacency. Check ARP table (show arp) has entry for nexthop.
Drop Detail:
Drop-location: frame snp_fp_adj_process_cb:256 flow (NA)/NA

Above is the log I am getting when packet trace from FTDv1 to DMZ subinterface.

 

1 Accepted Solution

Accepted Solutions

arp issue' must likely you not config correct vlan in trunk in SW' or missing add vlan to SW

MHM

View solution in original post

2 Replies 2

arp issue' must likely you not config correct vlan in trunk in SW' or missing add vlan to SW

MHM

in deed, once created vlan's without subnet on the SW all went up.

Review Cisco Networking for a $25 gift card