topic Re: Firepower4100 ASA, is it possible not occupying a data interface for ASA management? in Network Security

Firepower4100 ASA, is it possible not occupying a data interface for ASA management?

fraserC — Fri, 21 Feb 2020 15:42:46 GMT

FPR 4100 comes with 8x10G SPF network module. via Quick start Guide, it needs to assgin a one of these 8 ports for ASA management. It is too expensive if only for mgmt access.

I may configure inside interface to allow mgmt HTTP/SSH access. However I am not able to release the assigned asa mgmt port via FDM. Is it possible to save this port for data?

Re: Firepower4100 ASA, is it possible not occupying a data interface for ASA management?

Dennis Mink — Sat, 05 May 2018 08:09:35 GMT

the quick start guide only seems to suggest using these ports when you set upo a port channel. only then do you need to choose between managament and data.

if you just use the management port for management and you have no need to add a port channel for management, you can use the 8 sfps for data.

Re: Firepower4100 ASA, is it possible not occupying a data interface for ASA management?

Marius Gunnerud — Sun, 06 May 2018 12:50:11 GMT

If you are running ASA on the FP4100 then no you do not need to dedicate a port for management. If this is FP4100 running FTD then yes you need to have a dedicated management port.

Re: Firepower4100 ASA, is it possible not occupying a data interface for ASA management?

fraserC — Wed, 18 Jul 2018 01:58:59 GMT

Confirmed with Cisco that it is true on FP4100 you have to assign a data port as dedicated ASA management interface. FP2100 is different, it shares the chassis MGT interface for ASA management.

Re: Firepower4100 ASA, is it possible not occupying a data interface for ASA management?

Marvin Rhoads — Wed, 18 Jul 2018 03:15:03 GMT

That's correct. Thanks for confirming the TAC feedback.