About TerenceLockette

TerenceLockette · 10-17-2024

Hello,I am extremely irritated and frustrated with FDM and have no idea why anyone would want to manage the FTDs locally (I do know why but that's beyond the point). I am in the process of going through ACL rules in order to migrate away from the FDM...

TerenceLockette · 01-22-2024

Hello,I have a couple of questions regarding the potential for moving to ACI for a greenfield deployment. To give a little bit of background, our environment is small in comparison to others. We have a single data center that houses approx. 340 VMs...

TerenceLockette · 10-13-2023

Hi all,I am running FMC 7.2.4 that manages a pair of 2140 FTDs used for dedicated VPN connections (remote access and site-to-site). Yesterday I made an attempt to configure a route-based VPN to AWS and mistakenly added the VTI to a security zone (VP...

TerenceLockette · 07-02-2023

Hello,I'm setting up a Catalyst 9800CL WLC and I have it working as needed with 2 SSIDs. I'm adding a 3rd SSID just as I did the others along with a new VLAN (no SVIs on the 9800 as my ASA firewall is acting as the gateway and DHCP relay server for ...

TerenceLockette · 04-24-2023

Hello,I have a scenario that I'm not sure how unique of a requirement this may be compared to how others implement IPsec tunnels for route-based VPNs on the FTD managed by FMC. We have network environments at a branch office that requires separation...

TerenceLockette · 10-17-2024

So based on the URL referenced above, the appliance is indeed blocking this traffic so all other rules below with a zero hit count are not being matched against that 'permit ip any any' and are legit zero hit as the firewall has not matched any traff...

TerenceLockette · 10-17-2024

Here is the rule order from rule 1 to the GeoBlock rule. No misconfiguration based on what's shown here. Any rules that may be any any specifies a source and destination zone. The CLI output doesn't even list source/dest zone which makes sense becaus...

TerenceLockette · 01-22-2024

Thanks. I actually opened a TAC case for this and the actual fix was the following:- The script did not identify any duplicate interfaces- We made a dummy edit on the mentioned security zone object and then the deployment began to work in security z...

TerenceLockette · 07-02-2023

It doesn't make any sense to me but using this analyzer helped tremendously! So, as I stated in my original post, I can get DHCP for the 2 existing SSIDs no problem but wasn't getting it for the 3rd (and final) SSID. After running the analyzer, I h...

TerenceLockette · 07-02-2023

Thank you! I will give this a try and report any findings.

Member Since	‎07-06-2021 07:53 AM
Date Last Visited	‎10-24-2024 01:37 AM
Posts	21
Total Helpful Votes Received	2

User Statistics

User Activity

FDM GUI Block Rule Shows Permit IP Any Any in CLI

Questions about ACI from a real world Perspective

Too Many Interfaces in Security Zone or Interface Group - FMC

Adding new SSID & VLAN to Catalyst 9800CL Not Working

Multiple VTIs using same tunnel source & destination on FMC

Re: FDM GUI Block Rule Shows Permit IP Any Any in CLI

Re: FDM GUI Block Rule Shows Permit IP Any Any in CLI

Re: Too Many Interfaces in Security Zone or Interface Group - FMC

Re: Adding new SSID & VLAN to Catalyst 9800CL Not Working

Re: Adding new SSID & VLAN to Catalyst 9800CL Not Working