Cisco Firepower 2100 User Manual

For IPv4:
enter ip-block ip_address prefix [http | snmp | ssh]
For IPv6:
enter ipv6-block ipv6_address prefix [https | snmp | ssh]
For IPv4, enter 0.0.0.0 and a prefix of 0 to allow all networks. For IPv6, enter :: and a prefix of 0 to allow
all networks. You can also add access lists in the chassis manager at Platform Settings > Access List.
Example:
firepower-2110 /system/services # enter ip-block 192.168.4.0 24 https
firepower-2110 /system/services/ip-block* # exit
firepower-2110 /system/services* # enter ip-block 192.168.4.0 24 ssh
firepower-2110 /system/services/ip-block* # exit
firepower-2110 /system/services* # enter ip-block 192.168.4.0 24 snmp
firepower-2110 /system/services/ip-block* # exit
firepower-2110 /system/services* # enter ipv6-block 2001:DB8:: 64 https
firepower-2110 /system/services/ip-block* # exit
firepower-2110 /system/services* # enter ipv6-block 2001:DB8:: 64 ssh
firepower-2110 /system/services/ip-block* # exit
firepower-2110 /system/services* # enter ipv6-block 2001:DB8:: 64 snmp
firepower-2110 /system/services/ip-block* # exit
firepower-2110 /system/services* #
a) Delete the old access lists.
For IPv4:
delete ip-block ip_address prefix [http | snmp | ssh]
For IPv6:
delete ipv6-block ipv6_address prefix [https | snmp | ssh]
Example:
firepower-2110 /system/services # delete ip-block 192.168.45.0 24 https
firepower-2110 /system/services* # delete ip-block 192.168.45.0 24 ssh
firepower-2110 /system/services* #
Step 6 (Optional) Reenable the IPv4 DHCP server.
scope system
scope services
enable dhcp-server start_ip_address end_ip_address
You can also enable and disable the DHCP server in the chassis manager at Platform Settings > DHCP.
Example:
firepower-2110# scope system
firepower-2110 /system # scope services
firepower-2110 /system/services # enable dhcp-server 192.168.4.10 192.168.4.20
Step 7 Save the configuration.
Cisco Firepower 2100 Getting Started Guide
211
ASA Deployment with ASDM
(Optional) Change the FXOS and ASA Management IP Addresses or Gateway

Cisco Firepower 2100 Specifications

General

Brand	Cisco
Model	Firepower 2100
Category	Gateway
Language	English