Cisco Firepower 4110 User Manual

Cisco Preparative Procedures & Operational User Guide
© 2016 Cisco Systems, Inc. All rights reserved.
4.5.5 Configure SSH Access
The following procedure describes how to enable or disable SSH access to the Firepower chassis. SSH is
enabled by default.
4.5.5.1 Configure SSH via CLI
The following procedure describes how to enable or disable SSH access to the Firepower chassis. SSH is
enabled by default.
1) Enter system mode:
Firepower-chassis # scope system
2) Enter system services mode:
Firepower-chassis /system # scope services
3) To configure SSH access to the Firepower chassis, do one of the following:
• To allow SSH access to the Firepower chassis, enter the following command:
Firepower-chassis /system/services # enable ssh-server
• To disallow SSH access to the Firepower chassis, enter the following command:
Firepower-chassis /system/services # disable ssh-server
4) Display the SSH settings:
Firepower-chassis /system/services # show ssh-sever
5) Set the Approved algorithms only:
Firepower-chassis /system/services # set ssh-server aes128-cbc aes256-cbc
Firepower-chassis /system/services # set ssh-server mac-algorithm hmac-
sha1 hmac-sha2-256 hmac-sha2-512
Firepower-chassis /system/services # set ssh-server kex-algorithm diffie-
hellman-group14-sha1
6) Configure the SSH Rekey limit:
Firepower /system/services # set ssh-server rekey-limit volume [KB] time
[Minutes]
7) Commit the transaction to the system configuration:
Firepower /system/services # commit-buffer

Cisco Firepower 4110 Specifications

General

Power Supply	Dual, hot-swappable
Form Factor	1RU
Firewall Throughput (Multiprotocol)	10 Gbps
Number of 10GE (SFP+) Interfaces	8
Number of 40GE (QSFP+) Interfaces	2
Redundant Power Supply	Yes
Memory	32 GB
Ports	8 x 10GE, 2 x 40GE
Concurrent Sessions	8 Million
Number of 10/100/1000 Interfaces	8
Maximum Connections	8 Million
Management Ports	1 x RJ45
Data Ports	8 x 10GE, 2 x 40GE
Processor	Intel Xeon E5-2600