- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-13-2020 05:59 AM
Hello,
We have an ASA with Firepower Services. The ASA is a 5545-X with software version 9.6(2). We have a virtual FMCv wich is the manager of the SFR device. The FMC has an ip address in the vlan 10.11.12.x, and the SFR has an ip address in the 10.11.14.x vlan. The ASA has a policy to redirect the assigned traffic trough the SFR device for policies inspection, URL categorization, ips and so.
It is required to change the ip address of the SFR device to the 10.11.12.x range.
I know using "configure network" command on the sfr module I could change the SFR ip address.
But what else I need to do for update it in the FMC? What else I have to consider?
Thanks.
Luigi.
Solved! Go to Solution.
Accepted Solutions
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-13-2020 02:25 PM
you dont need to change the ACL-SFR policy in the ASA. as long as the SFR sensor and the vFMC communication in place you good no need to change of anything else.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-13-2020 11:43 AM
Update the device's management address in the FMC by going into the device details, move the slider to deactivate management, edit the management address and then mode the slider back to reactivate management.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-13-2020 11:58 AM
Thanks a lot Marvin,
There is an additional consideration to take at the ACL-SFR policy in the ASA when the traffic es redirected? or should it work fine after returning back the redirect?
Thanks again.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-13-2020 02:25 PM
you dont need to change the ACL-SFR policy in the ASA. as long as the SFR sensor and the vFMC communication in place you good no need to change of anything else.
