ap(config)#ip default-gateway 10.1.0.1
Step 7. Modify the FirePOWER Module Management IP Address (Optional)
If you also plan to deploy the Cisco FirePOWER (also known as SFR) module then you also need
to change its IP address in order to access it from the physical Management1/1 interface on the
ASA. There are two basic deployment scenarios that determine how to configure the ASA and the
SFR module:
1.
A topology in which the ASA Management1/1 interface is connected to an inside switch (as
per the normal quick start guide)
2.
A topology where an inside switch is not present.
Depending on your scenario,these are the appropriate steps:
If the ASA Management1/1 interface is connected to an inside switch:
You can session into the module and change it from the ASA before connecting it to an inside
switch. This configuration allows you to access the SFR module via IP by placing it on the same
subnet as the ASA inside interface with an IP address of 10.0.0.254.
Lines in bold are specific to this example and are required for establishing IP connectivity.
Lines in italics will vary by environment.
asa# session sfr console
Opening console session with module sfr.
Connected to module sfr. Escape character sequence is 'CTRL-^X'.
Cisco ASA5506W v5.4.1 (build 211)
Sourcefire3D login: admin
Password: Sourcefire
<<Output Truncated - you will see a large EULA>>
Please enter 'YES' or press <ENTER> to AGREE to the EULA: YES
System initialization in progress.
You must change the password for 'admin' to continue.
Enter new password:
Confirm new password:
You must configure the network to continue.
You must configure at least one of IPv4 or IPv6.
Do you want to configure IPv4? (y/n) [y]: y
Do you want to configure IPv6? (y/n) [n]: n
Configure IPv4 via DHCP or manually? (dhcp/manual) [manual]:
Enter an IPv4 address for the management interface [192.168.45.45]: 10.0.0.254Enter an IPv4
netmask for the management interface [255.255.255.0]: 255.255.255.0
Enter the IPv4 default gateway for the management interface []: 10.0.0.1
Enter a fully qualified hostname for this system [Sourcefire3D]: Cisco_SFR
Enter a comma-separated list of DNS servers or 'none' []: 10.0.0.250
Enter a comma-separated list of search domains or 'none' [example.net]: example.net
If your networking information has changed, you will need to reconnect.
For HTTP Proxy configuration, run 'configure network http-proxy'
Applying 'Default Allow All Traffic' access control policy.
Note: It may take a couple minutes for the default access control policy to apply on the SFR
Please stand by.
Stampa la pagina