Hello team,
I want to use Firepower3120 in multi-instnace mode. I going to create a port-channel on the chassi and assign it direct to instance.
The question: is it possible to create subinterfaces for VLANs on portchannel in the instance?
I ask, bec...
Hello everyone,
Recently it became necessary to reset the password for the admin user, and the old password was lost. At the same time, there was access to FW under a different administrator account on the CLI of the firewall.
The task was not as si...
Hi all, I want to ask the community if my understanding is correct.
Waht we have:
1. Centrale ASA with static Public-IP.IP-Address in LAN - 10.0.10.0/24
2. Remote FW-1 with dynamic Public-IP.IP-Address in LAN - 10.0.20.0/24ISAKMP-ID : fw-id-1PSK: xxx...
Hello Sheraz,> - If you assign the port-channel directly to an instance, you'll only be able to pass untagged traffic on that instance.
However, this conflicts with another statement in the documentation. - This document discusses chassis VLAN subint...
Hello Sheraz,
thank you for your answer. Have you tried setting up a similar layout before?I also think it should work, but I would still like to understand what the following limitations in the documentation mean.
You wrote:> 2. **Untagged Traffic**...
>> In this configuration, FW-1 can easily establish an IPsec Tunnel using the IP address of FW-2's LAN.!!That's exactly what I wrote in the description of my question
Regarding your notes 1,2,3. My question is not about how to configure the FW-1 or F...
Hi Sheraz,
thank you for your answer. But in my configuration I also use separate crypto maps: crypto dynamic-map ifw-id-1 1 match address outside-1_cryptomap crypto dynamic-map fw-id-2 2 match address outside-1_cryptomap_1But it don't resolve the ...
