ASA FTD with FMC

[caiobomani]

Dear team,

I'm currently setting up my data center with Cisco ASAs and am attempting to use the ASA running FTD and manage them via FMC.

My first issue was with licensing. Since I'm using FMC after version 6, the license (classic) is no longer accepted (for what I understood, the image is "prelicensed"). With that being said, now I need to make my ASA firewalls (5516-x) be managed by that FMC. The problem is with the communication.

Whenever I attempt to make the ASA be managed by the FMC, I keep getting messages that it should use a dedicated gateway for management and dont let me register in the FMC without it.

My question is:
Can I manage the ASA via FMC without using the management interface? Or its mandatory that management be made via that interface?

I want to use a data interface as a management interface as well.

Thanks in advance for any support.

[Francesco Molino · Accepted solution]

Hi

Yes you need to use the management interface to be allowed to register it on FMC.

[caiobomani]

And I assume that I cannot assign an IP address within the subnet that other interfaces (data for example) belongs right?

[Fotiosmark]

thats not true.
You see you set the IP for Management through the Console, in the FTD. Once that is set you can log in the FMC, add the device, Register it, and then you can set IPs for the interfaces through there, depending if the FTD is in Routed mode or Transparent mode. But you can because Management with the actual interfaces are different

[Fotiosmark]

I had the same question not long ago.
The Management interface is required to use FMC to manage the ASA. This is the way it gets the licence also. (smart licensing from now on)