FIREPOWER MODULE IP ADDRESS ASA 5506X

[banst8801]

Hi everyone,

I have to deploy a new ASA 5506-X with firepower services. I have the next devices:

ASA 5506-X: Cisco Adaptive Security Appliance Software Version 9.5(2)  |  Device Manager Version 7.5(2) |  sfr ASA FirePOWER  5.4.1-211

Switch 2960-X (Lan Base): IOS Version 15.2(4)E

The switch is doing the intervlan routing. (The topology is attached.) Also I have a DMZ.

ASA (Ethernet 1/2) IP Address: 172.20.0.1/24
VLAN 1 SWITCH 2960X: 172.20.0.2/24

The questions:

1.- should I use an IP address for management interface? or just use the IP address for the Firepower module?

2.- Which IP addres and Default Gateway should I use for the Firepower module? should I use another segment?

Regards,

[Marvin Rhoads · Accepted solution]

There is a quick start guide which addresses your question n some detail. Please refer to it here:

http://www.cisco.com/c/en/us/td/docs/security/asa/quick_start/5506X/5506x-quick-start.html#pgfId-139622

Let us know if you still have doubt after reading it.

[banst8801]

Hello Marvin,

Thank you! This guide is really helpful. Now I understand.

I have another question, I hope you can help. Is there any procedure to power off the ASA 5506-X? should I shutdown the firepower module first? or just unplug the power cord?

For example for a lab environment.

Regards.