ASA 5545X SFR Configuration

[TW80CJ5]

Hello Everyone!

Is there a command or way to kick off the ASA SFR configuration prompts with out having to go the sfr uninstall then transfer the package process? We are having to re-home our ASA's to their correct Region, so we need to update the IP address, NTP, DNS settings, etc.

Thought / Suggestions?

[balaji.bandi]

Not sure if i am addressing correctly, you want to move SFR only whole ASA and AFR  to different region and IP address chagne ?

check this document help you :

https://www.cisco.com/c/en/us/support/docs/security/asa-firepower-services/118644-configure-firepower-00.html

[TW80CJ5]

We have a configuration script ready for the ASA. But since the SFR is a separate sw module, it requires a separate configuration to point it to its manager, an FMC 4500.
When you first config a SFR, it prompts you for the specific information via CLI.

[TW80CJ5]

Hey BB, thanks for the link. Here is the specific section of the link that I am referring to:

Configure the FirePOWER Software
Complete these steps in order to configure the FirePOWER software:

Open a session to the ASA SFR module.
Note: A different login prompt now appears because the login occurs on a fully-functional module.

Here is an example:

ciscoasa# session sfr
Opening command session with module sfr.
Connected to module sfr. Escape character sequence is 'CTRL-^X'.
Sourcefire ASA5555 v5.3.1 (build 152)
Sourcefire3D login:
Log in with the username admin and the password Admin123.
Complete the system configuration as prompted, which occurs in this order:
Read and accept the End User License Agreement (EULA).
Change the admin password.
Configure the management address and DNS settings, as prompted.
Note: You can configure both IPv4 and IPv6 management addresses.

Here is an example:

System initialization in progress. Please stand by. You must change the password
for 'admin' to continue. Enter new password: <new password>
Confirm new password: <repeat password>
You must configure the network to continue.
You must configure at least one of IPv4 or IPv6.
Do you want to configure IPv4? (y/n) [y]: y
Do you want to configure IPv6? (y/n) [n]:
Configure IPv4 via DHCP or manually? (dhcp/manual) [manual]:
Enter an IPv4 address for the management interface [192.168.45.45]:198.51.100.3
Enter an IPv4 netmask for the management interface [255.255.255.0]: 255.255.255.0
Enter the IPv4 default gateway for the management interface []: 198.51.100.1
Enter a fully qualified hostname for this system [Sourcefire3D]: asasfr.example.com
Enter a comma-separated list of DNS servers or 'none' []:
198.51.100.15, 198.51.100.14
Enter a comma-separated list of search domains or 'none' [example.net]: example.com
If your networking information has changed, you will need to reconnect.
For HTTP Proxy configuration, run 'configure network http-proxy'

We would like to be able to kick this process off again so the SFR can be correctly IP'd to its Region and FMC.