12-07-2018 01:56 PM - edited 03-12-2019 07:09 AM
I have ASA5506-X (9.8.2) with firepower services.
I'm working on the initial set up of firepower and am confused on how the IP addressing should be done.
The ASA has already be configured with BVI / all inside interfaces set to 192.186.2.1 (which is not the default value)
Questions:
1. Do I set the management interface on the ASA to 192.168.2.2, to no ip address, or to another IP address on a different subnet? And... why?
2. On the firepower module, do I set the management IP address to 192.168.2.1, or something else on the same subnet as the inside interface, or something on a different subnet? And.. why?
3. Is it sufficient to use a crossover cable to connect the first inside interface to the management interface, or is a switch necessary? Please explain if possible.
12-07-2018 02:35 PM
12-07-2018 02:50 PM - edited 12-07-2018 03:14 PM
I went ahead and did 192.168.2.2 on the firepower's management interface, no ip address on the ASA management interface (which is physically the same port), and kept the inside interface as 192.168.2.1. Pings work from the ASA to the firepower management IP address I set.
12-07-2018 03:56 PM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide