nerdexam
Cisco

300-710 · Question #160

An engineer is using the configure manager add <FMC IP> Cisc404225383 command to add a new Cisco FTD device to the Cisco FMC; however, the device is not being added. Why is this occurring?

The correct answer is D. The NAT ID is required since the Cisco FMC is behind a NAT device. The FTD device is failing to register with the FMC likely because the Cisco FMC is located behind a NAT device, requiring a NAT ID in the configure manager add command. The NAT ID helps uniquely identify the FTD's connection through the NAT.

Deployment

Question

An engineer is using the configure manager add <FMC IP> Cisc404225383 command to add a new Cisco FTD device to the Cisco FMC; however, the device is not being added. Why is this occurring?

Options

  • ADONOTRESOLVE must be added to the command
  • BThe IP address used should be that of the Cisco FTD, not the Cisco FMC
  • CThe registration key is missing from the command
  • DThe NAT ID is required since the Cisco FMC is behind a NAT device

How the community answered

(26 responses)
  • A
    12% (3)
  • B
    8% (2)
  • C
    4% (1)
  • D
    77% (20)

Why each option

The FTD device is failing to register with the FMC likely because the Cisco FMC is located behind a NAT device, requiring a NAT ID in the `configure manager add` command. The NAT ID helps uniquely identify the FTD's connection through the NAT.

ADONOTRESOLVE must be added to the command

The `DONOTRESOLVE` keyword is typically used to prevent DNS resolution for the FMC's hostname, but the core issue here is registration failure with an IP, not necessarily DNS resolution.

BThe IP address used should be that of the Cisco FTD, not the Cisco FMC

The command `configure manager add` is executed on the FTD and requires the IP address of the *FMC* as the manager it should connect to, so using the FMC's IP is correct.

CThe registration key is missing from the command

The string 'Cisc404225383' in the command clearly serves as the registration key, so it is not missing.

DThe NAT ID is required since the Cisco FMC is behind a NAT deviceCorrect

When a Cisco FMC is located behind a NAT device and the FTD device needs to register with it, a NAT ID is a mandatory parameter in the `configure manager add` command. This NAT ID helps the FMC distinguish and properly manage the FTD's connection through the NAT, and its absence can cause registration failures.

Concept tested: Cisco FTD-FMC registration with NAT

Source: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Device_Management.html#concept_C8C38B0EFB89498188151D87309E83A8

Topics

#FTD Registration#FMC Management#NAT Configuration#CLI Troubleshooting

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 300-710 Practice