07-05-2023 12:03 PM
Hello One More Time Community.
I have a problem with data interface and cann't resolve it: I have an error like this Gateway cannot be reached through port Ethernet1/1 named “outside". My configuratiion:
> show ip
System IP Addresses:
Interface Name IP address Subnet mask Method
Ethernet1/1 outside 10.10.61.77 255.255.255.0 DHCP
Ethernet1/2 inside_1_2 192.168.1.1 255.255.255.0 manual
Ethernet1/3 inside_1_3 192.168.2.1 255.255.255.0 manual
Ethernet1/4 inside_1_4 192.168.3.1 255.255.255.0 manual
Ethernet1/5 inside_1_5 192.168.4.1 255.255.255.0 manual
Management1/1 diagnostic unassigned unassigned DHCP
BVI1 bvi 192.168.77.1 255.255.255.0 manual
===============================================================
show network
Hostname : Firewall
Domains : google.com
DNS Servers : 8.8.8.8
8.8.4.4
DNS from router : disabled
Management port : 8305
IPv4 Default route
Gateway : 192.168.45.1
Netmask : 0.0.0.0
==================[ management0 ]===================
Admin State : enabled
Admin Speed : 1gbps
Operation Speed : indeterminate
Link : link-down
Channels : Management & Events
Mode : Non-Autonegotiation
MDI/MDIX : Auto/MDIX
MTU : 1500
MAC Address : 40:06:D5:85:FF:80
----------------------[ IPv4 ]----------------------
Configuration : Manual
Address : 192.168.45.45
Netmask : 255.255.255.0
Gateway : 192.168.45.1
----------------------[ IPv6 ]----------------------
Configuration : Disabled
Plz Help Me !
07-05-2023 12:09 PM
Hi @Derek1993
Where do you see this error? On the firewall ?
you getway seems to be 192.168.45.1 and you outsinde is 10.10.61.77. You seems not have any interface on the network 192.168.45.0
07-05-2023 12:37 PM
@Flavio Miranda Ok and What kind of configuration I must to provide for Management Interface ? Help
07-05-2023 12:12 PM
@Flavio Miranda Hi added pictures of my configuration:
07-05-2023 01:23 PM - edited 07-05-2023 01:23 PM
I believe the problem can be related to this config. As you are checking "Use the Data interface as the Gateway" it is trying to send the data through the outside interface.
07-05-2023 01:26 PM
Yes I am use this configuration beacause I haven't ANY seperate network or cabel for management interface: I want to use only data interface, I don't have another cabel for Management interface!
07-05-2023 01:31 PM
I believe this is not a problem but you need to make sure you have recheability through outside to the gateway. If the outside interface is connected to ISP, for example, this could be a problem for you.
07-05-2023 01:33 PM
Yes My oitside interface Connected to my ISP, I don't have any routers before my FP 1120 ? What I must to do in this situation ?
07-05-2023 01:35 PM
Try to select the option "Use unique gateway for the management interface" and select one interface you have connectivity with the manager.
07-05-2023 01:38 PM
07-05-2023 01:44 PM
Change from DHCP to static and add the IP address. You might have connectivity through another interface. Try the BVI interface. Use like 192.168.77.2 255.255.255.0 and use the BVI as gateway 192.168.77.1
07-05-2023 02:00 PM
I am change, BUT any result, still the same issues. One more whe I set management interface use this command configure network ipv4 dhcp-dp-route and set Configuration for Management interface to DHCP, I can run ping system 8.8.8.8 and All is Work, BUT I can ping system www.cicso.com
Here is output from CMD
===============[ System Information ]===============
Hostname : Firewall
DNS Servers : 1.1.1.1
1.0.0.1
DNS from router : disabled
Management port : 8305
==================[ management0 ]===================
Admin State : enabled
Admin Speed : 1gbps
Operation Speed : indeterminate
Link : link-down
Channels : Management & Events
Mode : Non-Autonegotiation
MDI/MDIX : Auto/MDIX
MTU : 1500
MAC Address : 40:06:D5:85:FF:80
----------------------[ IPv4 ]----------------------
Configuration : DHCP
----------------------[ IPv6 ]----------------------
Configuration : Disabled
===============[ Proxy Information ]================
State : Disabled
Authentication : Disabled
ping system 8.8.8.8
> ping system 8.8.8.8
PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.
64 bytes from 8.8.8.8: icmp_seq=1 ttl=121 time=16.1 ms
64 bytes from 8.8.8.8: icmp_seq=2 ttl=121 time=15.3 ms
64 bytes from 8.8.8.8: icmp_seq=3 ttl=121 time=15.4 ms
64 bytes from 8.8.8.8: icmp_seq=4 ttl=121 time=15.9 ms
64 bytes from 8.8.8.8: icmp_seq=5 ttl=121 time=15.10 ms
^C
--- 8.8.8.8 ping statistics ---
5 packets transmitted, 5 received, 0% packet loss, time 7ms
ping system google.com
ping: google.com: Temporary failure in name resolution
07-05-2023 02:06 PM - edited 07-05-2023 02:07 PM
You are missing DNS.
07-06-2023 01:36 AM
PPPoE on FMC - Cisco Community
for the OUTside since it learn IP from DHCP you need to enable route for that interface
this will make FPR have automatic default route toward ISP
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide