FTD Management via VPN issue

[Jewgeni Uschegow]

Hello all,

ich try to configure Management Access to FTD DataInterface via s2s tunnel.

On the I configured ACL and http mgmt_lan inside. But it is not work. Maybe did somebody configure it and can me help?

Regards, 

[Rob Ingram]

Hi,
To manage the FTD over a VPN tunnel you will need to configure the command "management-access inside", you will need to do this using Flexconfig.

HTH

[Jewgeni Uschegow]

Hi,

thanks for answer.

I wanted to do it, but management access is in cli blacklist.

https://www.cisco.com/c/en/us/td/docs/security/firepower/623/fdm/fptd-fdm-config-guide-623/fptd-fdm-advanced.html

Regards,

[Rob Ingram]

This is a known issue https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvo83813

If you are using FDM to manage the FTD, you would need to upgrade to 6.5.....although I am pretty sure it's also fixed in 6.4.0.8.

HTH

[Jewgeni Uschegow]

Yes, I use FDM and I have 6.5.0.4

[Marvin Rhoads]

I don't have an FTD with 6.5 handy, but it works using FMD and FTD 6.6:

FDM Flexconfig for management-access

[Jewgeni Uschegow]

Hello Martin,

I have now 6.6 and flexconfig too, but it doest work(

#sh run | inc mana
management-access voip

# sh run | inc http
http server enable
http 172.25.5.0 255.255.255.0 voip

What did I false?

Regards,

[Jewgeni Uschegow]

Hi Marvin,

are you sure that it works for you?

The answer from TAC that it is bug CSCvg50549.

Regards,