Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Happy_Trooper
Stats
Member since
11-19-2018
6
Posts
0
Helpful
0
Solutions
Created by
Happy_Trooper
in Network Security
in Network Security
12-02-2019
05:15 AM
12-02-2019
05:15 AM
Thank you all for your assistance. I'm going to head over to Networking 101 class :( It was an IP conflict.
... View more
Created by
Happy_Trooper
in Network Security
in Network Security
11-23-2019
05:56 AM
11-23-2019
05:56 AM
Hello, Thank you for your response. The screenshot in my previous post, showing the failed web login, was from going to the management IP: https: //10.200.1.210 I have the devices in a simple configuration, as noted below: The only network cable connected to the FPR-4110 is to the management port. The remaining ports do not have any SFPs or connections. It looks just like the picture below. I have a 2nd unit with the same issue. Perhaps it is user error. I have followed the getting started guide, setup the necessary address, subnet, IP block, gateway. Can ping the devices, SSH/HTTPS responds, but does not accept my credentials. If I am connected via console cable, I CAN SSH to the managment IP successfully. But I cannot SSH/HTTPS through a network connection. Is there a feature that needs to be enabled? HTTP and SSH have been set to enabled. Is there a license that needs to be applied? Is 2.4 buggy with this? Many thanks for your time and assistance.
... View more
Created by
Happy_Trooper
in Network Security
in Network Security
11-22-2019
12:31 PM
11-22-2019
12:31 PM
Hello, I am facing an issue with SSH/HTTPS management access on a Firepower 4100. After un-boxing the device, I consoled in and ran through the initial setup. I assigned the IP, subnet, hostname, default gateway, and IP blocks on the interface. I am able to ping the chassis mgmt interface from a laptop on the same subnet. From my laptop, I use putty to SSH in, I get a response, but using the same credentials that work for console access, it says access denied. I can confirm that my IP is in the IP block list on the private subnet of: 10.200.1.x/24. When I attempt to access the 4100 via https, I get the login page, but my credentials that work for console access, do not work for web access: The only network connectivity that I have to the appliance is to the chassis mgmt port. I simply want SSH and/or HTTPS access. I tried creating a 2nd admin user. I have the same issue with that account. Is there something simple that I am missing to SSH/HTTPS into the chassis management port? I'm on version 2.4(1.101). I have followed the Cisco Firepower 4100 Quick Start Guide. According to the doc, after the initial configuration, one should be able to SSH in to the appliance. Many thanks for your assistance.
... View more
Labels:
11-19-2018
08:02 AM
That is a great point, I didn't think about the current AP licensing As mentioned initially, they have 100 licenses, I checked and 59 are in use. Reseating that license would be a pain.
Its looking like your initial suggestion of upgrading the code on the production unit is the way to go. I suppose, I could have the secondary unit ready as a cold failover in the event of a disaster. Assuming the code upgrade goes well on the production WLC, and all APs are safe, I can begin introducing the 2nd unit, with different IPs and the correct licensing, ultimately setting up HA.
... View more
11-19-2018
07:20 AM
Hello,
Thank you for your reply. I will need to find out the licensing situation. I'll check with the client on the SKUs when the devices were ordered.
I agree, upgrading the code to 8.3.143 would be the easy way. Is there risk involved? I am worried that if I upgrade the production unit from 8.3.133 to 8.3.143 and it "bricks" the unit for some reason, I am dead in the water. Is it possible/safer to introduce the unused WLC 5508 to the network with the 8.3.143 code, setup a mobility group, and then move the APs over to the newer code unit? Would having WLCs on different code versions work in a mobility group in this situation?
Thank you.
... View more
Created by
Happy_Trooper
in Network Security
12-02-2019
12-02-2019
Thank you all for your assistance. I'm going to head over to Networking
101 class :( It was an IP co...
Created by
Happy_Trooper
in Network Security
11-23-2019
11-23-2019
Hello,Thank you for your response. The screenshot in my previous post,
showing the failed web login,...
Created by
Happy_Trooper
in Network Security
11-22-2019
11-22-2019
Hello,I am facing an issue with SSH/HTTPS management access on a
Firepower 4100. After un-boxing the...
11-19-2018
That is a great point, I didn't think about the current AP licensing As
mentioned initially, they ha...
Public Statistics
| Date Registered | 11-19-2018 06:05 AM |
| Date Last Visited | 12-04-2019 12:49 AM |
| Total Messages Posted | 6 |
