Set Up Devices and Connect them to the Network

The first thing you must do is connect your Firepower Management Center and Firepower Threat Defense devices to the network. Depending on how your organization manages network devices, you might need assistance to install the devices in a rack.

Set Up Devices

Because the various models of physical and virtual devices are set up differently, consult the documentation for your Firepower Management Center and Firepower Threat Defense device to:

After performing those tasks, continue with the next section to configure IP addresses and to perform the other tasks necessary to get the Firepower System running.

Connect the Firepower Management Center to the Network

This task enables you to initially configure the Firepower Management Center for access to the internet. You'll provide an IP address, subnet mask, and other parameters. Refer to the sample network diagram About the Network Setup.

Before you begin

See Set Up Devices and Connect them to the Network.

Procedure


Step 1

Connect to the virtual machine's console in vSphere or the physical appliance's Console port or using Secure Shell (SSH).

Step 2

Log in to the Firepower Management Center as the admin user. (By default, the password is Admin123.)

Step 3

At the prompt, enter the following command:

sudo configure-network
Step 4

When prompted, enter the password Admin123.

Step 5

Enter the following information at the prompts:

Do you want to configure IPv4 (y or n)? y
Management IP address [192.168.45.45]? 10.10.2.2
Management netmask [255.255.255.0]? 255.255.255.0
Management default gateway? 10.10.2.254
Are these settings correct (y or n)? y
Do you wish to configure IPv6? n
Step 6

The following messages are displayed to indicate configuration was successful:


Updated network configuration
Updated comms. channel communication

What to do next

See Connect the Managed Device to the Network.

Connect the Managed Device to the Network

Connecting a Firepower Threat Defense to the network is very similar to connecting a Firepower Management Center to the network. You'll provide an IP address and subnet mask for its management interface, DNS, and, in addition, specify the device should operate in routed mode and be managed by a Firepower Management Center. Refer to the sample network diagram About the Network Setup.

For more information about routed mode, see About Routed Firewall Mode.

Before you begin

See Set Up Devices and Connect them to the Network.

Procedure


Step 1

Connect to the virtual machine's console in vSphere or the physical appliance's Console port or using Secure Shell (SSH).

Step 2

Log in to the device with the default username admin and password Admin123.

Step 3

If required by your device, enter connect ftd.

Step 4

Press Enter to display the EULA and press Space to page through it.

Step 5

When prompted, enter yes to accept the EULA.

Step 6

At the Enter new password prompt, enter a password for your managed device and confirm the password when prompted.

Step 7

Enter the following information at the next prompts:

Do you want to configure IPv4 (y/n)? [y] y
Do you want to configure IPv6 (y/n)? [n] n
Configure IPv4 via DHCP or manually? (dhcp/manually) [manual] manual
Enter an IPv4 address for the management interface [192.168.45.1] 10.10.2.45
Enter an IPv4 netmask for the management interface [255.255.255.0] 255.255.255.0
Enter an IPv4 default gateway for the management interface 10.10.2.254
Enter a fully qualified hostname for this device [firepower] firepower
Enter a comma-separated list of DNS servers or 'none' [208.67.222.222,208.67.202.202] 8.8.8.8
Enter a comma-separated list of search domains or 'none' [] none
Are these settings correct (y or n)? y
Step 8

The following prompts are displayed:

If your networking information has changed, you will need to reconnect.
For HTTP Proxy configuration, run 'configure network http-proxy'
Step 9

Enter the following information:

Manage the device locally? (yes/no) [yes] no
Configure firewall mode (routed/transparent) [routed] routed
Step 10

The following prompt is displayed:

Configuring firewall mode ...
Step 11

At the next prompt, enter the following command:

configure manager add 10.10.2.2 cisco123
Step 12

The following prompt confirms the action was successful:

Manager successfully configured.

What to do next

See Configure the Firepower Management Center.