topic Re: changing interface IP on cli for Firepower 1140 FTD in Network Security

changing interface IP on cli for Firepower 1140 FTD

sam cook — Mon, 10 May 2021 09:59:05 GMT

Hi,

Anyone knows how to change an Ip for a production interface on Firepower 1140 FTD from CLI ?

I use local management FDM

FYI : for unknown reason i can not connect on management interface anymore. so i wanted to configure another interface from console port.

I tried : connect FTD , but then i can not find the right command

i can not find anything in the cli guide !

https://www.cisco.com/c/en/us/td/docs/security/firepower/command_ref/b_Command_Reference_for_Firepower_Threat_Defense/c_3.html

any help please ?

Re: changing interface IP on cli for Firepower 1140 FTD

Rob Ingram — Mon, 10 May 2021 10:08:48 GMT

Hi @sam cook

Management of an FTD using FDM is via the Web GUI only, you cannot configure from the CLI.

Can you ping the management interface? If you cannot connect to the management interface at all attempt to reboot and see if that resolves the issue.

Re: changing interface IP on cli for Firepower 1140 FTD

sam cook — Mon, 10 May 2021 10:11:40 GMT

Hi Rob,

ping is not working, port looks down and reboot does not change anything 😞

i feel really blocked , i have only console access .

regards,

Re: changing interface IP on cli for Firepower 1140 FTD

Rob Ingram — Mon, 10 May 2021 10:19:20 GMT

@sam cook

Are you managing the device on a data interface or the dedicated management interface? I connect to my FDM GUI using the data interface rather than the management interface.

Perhaps you are connecting from an IP address that is not permitted to access the GUI. If you have console access, run "show running-config http" and confirm what source IP address(es) can access the gui and from which interface(s).

You could allows connect to the management interface use "show network" to determine the IP address details, then connect your laptop to the interface and connect to the GUI.

Re: changing interface IP on cli for Firepower 1140 FTD

sam cook — Mon, 10 May 2021 11:03:04 GMT

ok , it seems like a bug , management came back to work after several reboot... possibly a hardware issue but now it's fine without any config change... thanks for your help Rob

Re: changing interface IP on cli for Firepower 1140 FTD

Marvin Rhoads — Mon, 10 May 2021 17:32:06 GMT

Try this from the console cli:

configure network ipv4 manual <ip address> <netmask> <gateway address>

Re: changing interface IP on cli for Firepower 1140 FTD

sam cook — Mon, 10 May 2021 17:47:54 GMT

Thank you Marvin , but as said by Rob , it's not possible , this command make you only change management ip

Re: changing interface IP on cli for Firepower 1140 FTD

Marvin Rhoads — Mon, 10 May 2021 18:10:17 GMT

Sorry - I misread your original post.

@Rob Ingram is correct - dataplane interfaces can only be changed from the manager, not from the cli.