topic Re: Managing logical device ASA from Firepower 4120 physical management port in Network Security

Managing logical device ASA from Firepower 4120 physical management port

gb7832 — Fri, 21 Feb 2020 15:14:31 GMT

I can't find any documentation that this is doable.

It seems that I need to burn one of the 8 ports to manage the logical ASA directly.

Re: Managing logical device ASA from Firepower 4120 physical management port

Marvin Rhoads — Wed, 31 Jan 2018 05:36:10 GMT

That's correct. The physical management port is for management of the chassis.

Logical devices need to have a port assigned from among the interfaces allocated to them. If it's an ASA logical device, you can allow management from a data interface.

Re: Managing logical device ASA from Firepower 4120 physical management port

gb7832 — Wed, 31 Jan 2018 16:10:24 GMT

Thanks for the confirmation.

Is this, also, true if my logical device is FTD?

Re: Managing logical device ASA from Firepower 4120 physical management port

Marvin Rhoads — Wed, 31 Jan 2018 16:59:33 GMT

The part about needing to allocate an interface for management of an FTD logical device is true.

The difference is that an FTD device must have a dedicated management/eventing interface to talk to the managing FMC. You don't have the option of relying solely on the "inside" or other such interface like you can with an ASA logical device.

Re: Managing logical device ASA from Firepower 4120 physical management port

gb7832 — Fri, 02 Feb 2018 16:19:10 GMT

Awesome info! Thanks Marvin!