The Firepower 1120 includes Management 1/1 and Ethernet 1/1 through 1/8. For example, the ASA 5525-X includes Management 0/0,Īnd GigabitEthernet 0/0 through 0/5. Make sure you change the interface IDs to match the new hardware IDs. TheĮxception to this rule is if you are connected to a management-only interface, such as Management 1/1. Strong encryption feature, then ASDM and HTTPS traffic (like that to and from the Smart Licensing server) are blocked. The reason for this issue is that the ASA includes 3DES capability by default for management access only. You can reenable these features after you obtain the Strong Encryption (3DES) license. Remove any VPN or other strong encryption feature configuration-even if you only configured weak encryption-if you cannotĬonnect to ASDM or register with the Smart Licensing server. Licensing requires that you connect to the Smart Licensing server to obtain your licenses. There are no licenses installed by default. PAK licensing is not applied when you copy and paste your configuration. For each interface in your configuration, add the no switchport command to make them regular firewall interfaces. These Ethernet ports are configured as switch ports by default.
This guide assumes a factory default configuration, so if you paste in an existing configuration, some of the procedures inĮthernet 1/2 through 1/8 firewall interfaces Paste the modified configuration at the ASA CLI. Please set it now.Ĭlear the current configuration using the clear configure all command. To copy the configuration, enter the more system:running-config command on the ASA 5500-X.Įdit the configuration as necessary (see below).Ĭonnect to the console port of the Firepower 1010, and enter global configuration mode: Also note some behavioral differences between the platforms. However, you will need to modify your configuration. You can copy and paste an ASA 5500-X configuration into the Firepower 1010. VLAN interfaces and switch ports do not support: VLAN Interface and Switch Port Unsupported Features SCTP inspection maps (SCTP stateful inspection using ACLs is supported) The following ASA features are not supported on the Firepower 1010: Unsupported Features General ASA Unsupported Features You can also access the FXOS CLI for troubleshooting purposes. You can manage the ASA using one of the following managers:ĪSDM (covered in this guide)-A single device manager included on the device.Ĭisco Defense Orchestrator-A simplified, cloud-based multi-device managerĬisco Security Manager-A multi-device manager on a separate server. The ASA provides advanced stateful firewall and VPN concentrator functionality in one device. Review the Network Deployment and Default Configuration.This case, an administrator might be able to see this information when working with the Personally-identifiable information in the configuration, for example for usernames. Privacy Collection Statement-The Firepower 1010 does not require or activelyĬollect personally-identifiable information.
See the FXOS troubleshooting guide for more Manager only a limited CLI is supported for troubleshooting purposes. The Firepower 1010 does not support the FXOS Firepower Chassis The Firepower 1010 runs an underlying operating system called the FirepowerĮXtensible Operating System (FXOS).
#5nine manager only shutdown systems show software
Software version than is currently installed. You should also reimage if you need a different Switching between ASA and FTD requires you to reimage the device. The Firepower 1010 hardware can run either ASA software or FTD software. This chapter also walks you through configuring a basic security policy if you have more advanced requirements, refer to This chapter does not cover the following deployments, for which you should refer to the ASA To see all available operating systems and managers, see Which Operating System and Manager is Right for You?.
0 kommentar(er)
