Procedure
Step 1 In ASDM, choose Configuration > Device Management > Management Access > FXOS Remote
Management.
Step 2 Enable FXOS remote management.
a) Choose HTTPS, SNMP, or SSH from the navigation pane.
b) Click Add, and set the Interface where you want to allow management, set the IP Address allowed to
connect, and then click OK.
You can create multiple entries for each protocol type. Set the Port if you do not want to use the following
defaults:
• HTTPS default port—3443
• SNMP default port—3061
• SSH default port—3022
Step 3 Allow FXOS to initiate management connections from an ASA interface.
a) Choose FXOS Traffic Initiation from the navigation pane.
b) Click Add, and enable the ASA interfaces where you need to send FXOS management traffic. By default,
the outside interface is enabled.
Step 4 Click Apply.
Step 5 Connect to the chassis manager (by default https://192.168.45.45, with the username: admin and the password
you set at initial login).
Step 6 Click the Platform Settings tab, and enable SSH, HTTPS, or SNMP.
SSH and HTTPS are enabled by default.
Step 7 Configure an Access List on the Platf ormSettings tab to allow your management addresses. SSH and HTTPS
only allow the Management 1/1 192.168.45.0 network by default. You need to allow any addresses that you
specified in the FXOS Remote Management configuration on the ASA.
Access the ASA and FXOS CLI
This section describes how to connect to the FXOS and ASA console and how to connect to FXOS using
SSH.
Connect to the Console Port to Access FXOS and ASA CLI
The Firepower 2100 console port connects you to the FXOS CLI. From the FXOS CLI, you can then connect
to the ASA console, and back again.
You can only have one console connection at a time. When you connect to the ASA console from the FXOS
console, this connection is a persistent console connection, not like a Telnet or SSH connection.
Cisco Firepower 2100 Getting Started Guide
225
ASA Deployment with ASDM
Access the ASA and FXOS CLI
To Next Page
Loading...
Need help?
General