Cisco Firepower Threat Defense for the ASA 5508-X and ASA 5516-X Using Firepower Management Center Quick Start Guide
Do you want to configure IPv6? (y/n) [n]: n
Configure IPv4 via DHCP or manually? (dhcp/manual) [manual]: manual
Enter an IPv4 address for the management interface [192.168.45.45]: 10.133.128.47
Enter an IPv4 netmask for the management interface [255.255.255.0]: 255.255.248.0
Enter the IPv4 default gateway for the management interface []: 10.133.128.1
Enter a fully qualified hostname for this system [firepower]: laurel.example.com
Enter a comma-separated list of DNS servers or 'none' []: 10.33.16.6
Enter a comma-separated list of search domains or 'none' []:
If your networking information has changed, you will need to reconnect.
For HTTP Proxy configuration, run 'configure network http-proxy'
Manage the device locally? (yes/no) [yes]: no
5.
Reconnect to your appliance using the new log in credentials.
6.
Configure the firewall mode. For example:
Configure firewall mode? (routed/transparent) [routed]
Note:
We recommend that you set the firewall mode at initial configuration. Note that the default mode is
routed. Changing the firewall mode after initial setup erases your running configuration. For more information,
see the Transparent or Routed Firewall Mode chapter in the Firepower Management Center Configuration
Guide.
7.
Wait for the default system configuration to be processed. This may take a few minutes.
Update policy deployment information
- add device configuration
You can register the sensor to a Management Center and use the Management Center
to manage it. Note that registering the sensor to a Management Center disables
on-sensor FirePOWER Services management capabilities.
When registering the sensor to a Management Center, a unique alphanumeric
registration key is always required.
to a Management Center, you must provide the hostname or the IP address along
with the registration key.
'configure manager add [hostname | ip address ] [registration key ]'
However, if the sensor and the Management Center are separated by a NAT device,
you must enter a unique NAT ID, along with the unique registration key.
'configure manager add DONTRESOLVE [registration key ] [ NAT ID ]'
Later, using the web interface on the Management Center, you must use the same
registration key and, if necessary, the same NAT ID when you add this
sensor to the Management Center.
—
Note:
The registration key is a user-generated one-time use key that must not exceed 37 characters. Valid
characters include alphanumerical characters (A–Z, a–z, 0–9) and the hyphen (-). You will need to remember
this registration key when you add the device to the Firepower Management Center.
8.
Identify the Firepower Management Center appliance that will manage this device using the configure
manager add command.
Remember that the registration key is a user-generated one-time use key which you need to add the device
to the Firepower Management Center's inventory. The following example shows the simple case:
> configure manager add MC.example.com 123456
Manager successfully configured.
6. Configure the Device for Firepower Management
In most cases, to register a sensor
6
Drukuj stronę