Cisco Firepower 1010 Getting Started Manual page 157

Firepower Threat Defense Deployment with a Remote FMC
Gateway of last resort is 10.89.5.1 to network 0.0.0.0
S*
C
L
>
show nat
> show nat
Auto NAT Policies (Section 2)
1 (nlp_int_tap) to (outside) source static nlp_server_0_sftunnel_intf3 interface service
tcp 8305 8305
2 (nlp_int_tap) to (outside) source static nlp_server_0_ssh_intf3 interface
tcp ssh ssh
3 (nlp_int_tap) to (outside) source static nlp_server_0_sftunnel_ipv6_intf3 interface
ipv6
4 (nlp_int_tap) to (outside) source dynamic nlp_client_0_intf3 interface
5 (nlp_int_tap) to (outside) source dynamic nlp_client_0_ipv6_intf3 interface ipv6
>
Check other settings
See the following commands to check that all other settings are present. You can also see many of these
commands on the FMC's Devices > Device Management > Device > Management > FMC Access
Details > CLI Output page.
show running-config sftunnel
> show running-config sftunnel
sftunnel interface outside
sftunnel port 8305
show running-config ip-client
> show running-config ip-client
ip-client outside
show conn address fmc_ip
> show conn address 10.89.5.35
5 in use, 16 most used
Inspect Snort:
TCP nlp_int_tap
bytes 86684, flags UxIO
TCP nlp_int_tap
E1 - OSPF external type 1, E2 - OSPF external type 2, V - VPN
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, + - replicated route
SI - Static InterVRF
0.0.0.0 0.0.0.0 [1/0] via 10.89.5.1, outside
10.89.5.0 255.255.255.192 is directly connected, outside
10.89.5.29 255.255.255.255 is directly connected, outside
translate_hits = 0, untranslate_hits = 6
translate_hits = 0, untranslate_hits = 73
service tcp 8305 8305
translate_hits = 0, untranslate_hits = 0
translate_hits = 174, untranslate_hits = 0
translate_hits = 0, untranslate_hits = 0
preserve-connection: 0 enabled, 0 in effect, 0 most enabled, 0 most in effect
10.89.5.29(169.254.1.2):51231 outside
10.89.5.29(169.254.1.2):8305 outside
Troubleshoot Management Connectivity on a Data Interface
10.89.5.35:8305, idle 0:00:04,
10.89.5.35:52019, idle 0:00:02,
Cisco Firepower 1010 Getting Started Guide
service
155