Cisco Firepower 1010 Getting Started Manual page 130

Central Administrator Pre-Configuration Using the CLI
[...]
Hello admin. You must change your password.
Enter new password: ********
Confirm new password: ********
Your password was updated successfully.
[...]
firepower#
Step 4
If you connected to FXOS on the console port, connect to the FTD CLI.
connect ftd
Example:
firepower# connect ftd
>
Step 5 The first time you log in to FTD, you are prompted to accept the End User License Agreement (EULA) and,
if using an SSH connection, to change the admin password. You are then presented with the CLI setup script
for the Management interface settings.
The Management interface settings are used even though you are enabling FMC access on a data interface.
Note
Defaults or previously entered values appear in brackets. To accept previously entered values, press Enter.
See the following guidelines:
• Configure IPv4 via DHCP or manually?Choose manual. Although you do not plan to use the
Management interface, you must set an IP address, for example, a private address. This IP address is
NATted when the traffic is forwarded to the data interface. You cannot configure a data interface for
management if the management interface is set to DHCP, because the default route, which must be
data-interfaces (see the next bullet), might be overwritten with one received from the DHCP server.
• Enter the IPv4 default gateway for the management interface—Set the gateway to be data-interfaces.
This setting forwards management traffic over the backplane so it can be routed through the FMC access
data interface.
• If your networking information has changed, you will need to reconnect—If you are connected with
SSH, you will be disconnected. You can reconnect with the new IP address and password if your
management computer is on the management network. You will not be able to reconnect yet from a
remote network due to the default route change (through the data interfaces). Console connections are
not affected.
• Manage the device locally?—Enter no to use FMC. A yes answer means you will use Firepower Device
Manager instead.
• Configure firewall mode?—Enter routed. Outside FMC access is only supported in routed firewall
mode.
Example:
Cisco Firepower 1010 Getting Started Guide
128
You cannot repeat the CLI setup wizard unless you clear the configuration; for example, by reimaging.
However, all of these settings can be changed later at the CLI using configure network commands.
See the FTD command reference.
Firepower Threat Defense Deployment with a Remote FMC