topic Firepower 1120 basic configuration in Network Security

Firepower 1120 basic configuration

teamdv6199 — Wed, 25 Sep 2024 23:36:44 GMT

Hello,

I have a firewall 1120 ASA series and I am not understanding how the initial device works. I first want to change the management IP. Is that going to be Managment1/1 interface? Assuming it is, I can ping that new ip i made. How do I ssh to the fw to make changes. Is that going to be on the management IP? Or do I have to elevate to the ASA and configure another ip?

Re: Firepower 1120 basic configuration

Arne Bier — Thu, 26 Sep 2024 00:57:43 GMT

Not sure if this NAC Community forum is the right place for this firewall question. Normally (in my experience) is that you must configure the firewall using a console cable. And once the IP address is set, you don't want to change it in future. If you must change the management IP in future, then you might want to add an additional interface to the firewall, SSH to that, and then change the IP of the first interface. You don't want to cut yourself off. As for which 1120 interface is best used for management, I'd check the docs and perhaps as the firewall forum folks for best practices.

Re: Firepower 1120 basic configuration

Aref Alsouqi — Thu, 26 Sep 2024 09:11:44 GMT

Please take a look at this guide:
Cisco Firepower 1100 Getting Started Guide - ASA Deployment with ASDM [Cisco Firepower 1000 Series] - Cisco

Re: Firepower 1120 basic configuration

ahollifield — Thu, 26 Sep 2024 19:36:42 GMT

Yes it is. You SSH to the management IP. Or you can enable SSH on any other interface you like. Also why ASA and not FTD?