Cisco Firepower 2100 User Manual

======[ System Information - Data Interfaces ]======
DNS Servers :
Interfaces : Ethernet1/1
===============[ Ethernet1/1 ]===============
State : Enabled
Link : Up
Name : outside
MTU : 1500
MAC Address : 28:6F:7F:D3:CB:8F
----------------------[ IPv4 ]----------------------
Configuration : Manual
Address : 10.89.5.29
Netmask : 255.255.255.192
Gateway : 10.89.5.1
----------------------[ IPv6 ]----------------------
Configuration : Disabled
Check that the threat defense registered with CDO
At the threat defense CLI, check that CDO registration was completed. Note that this command will not
show the current status of the management connection.
show managers
> show managers
Type : Manager
Host : account1.app.us.cdo.cisco.com
Display name : account1.app.us.cdo.cisco.com
Identifier : f7ffad78-bf16-11ec-a737-baa2f76ef602
Registration : Completed
Management type : Configuration
Ping CDO
At the threat defense CLI, use the following command to ping CDO from the data interfaces:
ping cdo_hostname
At the threat defense CLI, use the following command to ping CDO from the Management interface,
which should route over the backplane to the data interfaces:
ping system cdo_hostname
Capture packets on the threat defense internal interface
At the threat defense CLI, capture packets on the internal backplane interface (nlp_int_tap) to see if
management packets are being sent:
capture name interface nlp_int_tap trace detail match ip any any
show capturename trace detail
Check the internal interface status, statistics, and packet count
At the threat defense CLI, see information about the internal backplane interface, nlp_int_tap:
show interace detail
> show interface detail
[...]
Cisco Firepower 2100 Getting Started Guide
168
Threat Defense Deployment with CDO
Troubleshoot Management Connectivity on a Data Interface

Cisco Firepower 2100 Specifications

General

Brand	Cisco
Model	Firepower 2100
Category	Gateway
Language	English