• EtherChannels
• Redundant Interfaces; the Firepower 1010 does not support redundant interfaces for any interface type.
• Failover and state link
• Traffic zones
• Security group tagging (SGT)
Migrating an ASA 5500-X Configuration
You can copy and paste an ASA 5500-X configuration into the Firepower 1010. However, you will need to
modify your configuration. Also note some behavioral differences between the platforms.
1. To copy the configuration, enter the more system:running-config command on the ASA 5500-X.
2. Edit the configuration as necessary (see below).
3. Connect to the console port of the Firepower 1010, and enter global configuration mode:
ciscoasa> enable
Password:
The enable password is not set. Please set it now.
Enter Password: ******
Repeat Password: ******
ciscoasa# configure terminal
ciscoasa(config)#
4. Clear the current configuration using the clear configure all command.
5. Paste the modified configuration at the ASA CLI.
This guide assumes a factory default configuration, so if you paste in an existing configuration, some of the
procedures in this guide will not apply to your ASA.
Firepower 1010 ConfigurationASA 5500-X Configuration
Ethernet 1/2 through 1/8 switch ports
These Ethernet ports are configured as switch ports by default.
For each interface in your configuration, add the no switchport
command to make them regular firewall interfaces. For example:
interface ethernet 1/2
no switchport
ip address 10.8.7.2 255.255.255.0
nameif inside
Ethernet 1/2 through 1/8 firewall interfaces
Cisco Firepower 1010 Getting Started Guide
161
ASA Deployment with ASDM
Migrating an ASA 5500-X Configuration
To Next Page
Need help?
General