topic Re: IP Address Change - Virtual FMC in Network Security

IP Address Change - Virtual FMC

GRANT3779 — Tue, 12 Mar 2019 08:14:32 GMT

I am looking to change IP address of our FirePOWER Management Center which is virtual. I can see option to do this via the standard GUI but read conflicting info that I may need to ssh and also run some command line? Can anyone clear this up?

Thanks

The FirePOWER Management

Marvin Rhoads — Wed, 07 Sep 2016 01:36:53 GMT

The FirePOWER Management Center address can be changed from the GUI as you noted.

There is a console-based procedure that can be used in the event that you only have console access (initial setup, original IP lost/unknown, remote network only accessible via console server, etc.)

An ASA FirePOWER module needs to be changed from the cli as those do not have any graphical interface.

Thanks Marvin.

GRANT3779 — Wed, 07 Sep 2016 08:52:00 GMT

Thanks Marvin.

I read somewhere, possibly on here that when someone changed the FMC IP, the FirePOWER modules that were registered against it somehow automagically picked up the new FMC address without them doing anything. Not a problem if not. I will add re register the modules to new IP.

Re: IP Address Change - Virtual FMC

Atasawar1 — Sun, 17 Dec 2017 09:43:45 GMT

Via virtual appliance console;

sudo ifconfig eth0 x.x.x.x/x

sudo ip route add default via x.x.x.x

Re: Thanks Marvin.

prashant dwivedi — Fri, 01 Jun 2018 03:05:22 GMT

Hey mate,

did you do this in the prod network , if so, what was the impact of this to the registered devices?

Did FMC discover all of them automatically ?

Thanks,

Prashant

Re: IP Address Change - Virtual FMC

Patrick Laidlaw — Wed, 25 Jul 2018 22:45:28 GMT

The better way to do this is to execute the configure-network script.

sudo su

/etc/sysconfig/configure-network

Re: IP Address Change - Virtual FMC

gamoore — Wed, 25 Jul 2018 23:46:16 GMT

Is this script also at:

/usr/local/sf/bin/configure-network?

Our is the location specific to FMC version?

Thanks,

Re: IP Address Change - Virtual FMC

sheraz_latif — Sun, 21 Oct 2018 03:11:22 GMT

FMC & FTD are not typical linux operating systems they are based on firepower and you need to know firepower if you want to fix console and shell issues. I was facing same issues i wanted to change management IP address because i lost access to old subnet i tried to vi default network files but they have scripts instead of typical linux options so don't mess up with them you will eventually crash your equipment if you want to change management IP address of these equipment run below command on firepower

>expert
if you need "sudo su" ok go ahead provide credential

now type below command

"sudo /usr/local/sf/bin/configure-network" >>> follow the network setup instructions!

Sheraz

Re: IP Address Change - Virtual FMC

Marcin Zgola — Mon, 05 Nov 2018 22:12:29 GMT

What happened to FTD after you change FMC IP address? any steps there? did they go down?

Re: The FirePOWER Management

G_Singh — Fri, 12 Jul 2019 03:44:44 GMT

Hi Mavin, I found out that my FMC IP also needs to be changed soon due to some conflicts. I hope process is straight forward as below.
1. Back up FMC/FTD configs
2. Change IP of FMC
3. Remove manager from appliances (FTDs)
4. Re-add those appliances with changed FMC IP
Since everything is in production, dont want to make much interruption.

Any suggestions....Thanks in advance!

Re: IP Address Change - Virtual FMC

Harish Chopra — Wed, 24 Jun 2020 10:17:11 GMT

This was helpful for me.

a bit change I had to do - ifconfig eth0 x.x.x.x (no netmask or /mask was needed)

ip route add default via x.x.x.x

Re: IP Address Change - Virtual FMC

moj_ccie — Tue, 29 Dec 2020 06:08:26 GMT

On Cisco FTD:

You have to remove FTD Manager (Configure manager delete)

Then again add it with new IP (#configure manager add <IP add> <Unique Code>

On Cisco FTD: No more change is needed

Note:

Your FTD and FMC IP addresses must be in same network

Re: IP Address Change - Virtual FMC

frank2112 — Thu, 06 Jul 2023 20:23:14 GMT

What if the FTD and FMC are on different networks? In our case, we have several remote firewalls that are managed by the FMC at our main site (which is accessible thru a static mapping thru on of the FTD firewalls). Can I not change the "Configure Manager" in this case on the remote FTD boxes?

Re: IP Address Change - Virtual FMC

mweichseltree — Fri, 10 Nov 2023 10:28:01 GMT

@moj_ccie wrote:
On Cisco FTD:
You have to remove FTD Manager (Configure manager delete)
Then again add it with new IP (#configure manager add <IP add> <Unique Code>

On Cisco FTD: No more change is needed

Note:
Your FTD and FMC IP addresses must be in same network

they certainly must be reachable but not in the same network

Re: IP Address Change - Virtual FMC

moj_ccie — Wed, 14 Feb 2024 08:23:41 GMT

Exactly

Thanks

Re: IP Address Change - Virtual FMC

nomorenoless — Fri, 14 Feb 2025 14:13:23 GMT

if anyone is still looking for a solution for this after many years:
https://techstat.net/how-to-change-cisco-fmc-ip-address-from-cli/