Logical Device Management; Create A Asa Logical Device Via Cli - Cisco Firepower 4110 Preparative Procedures & Operational User Manual

Cisco Preparative Procedures & Operational User Guide

4.5.7 Logical Device Management

When you create a logical device, the FXOS chassis supervisor deploys the logical device by
downloading the specified software version and pushing the bootstrap configuration and management
interface settings to the specified security module/engine, or in the case of an intra-chassis cluster, to all
security modules installed in the Firepower chassis.

4.5.7.1 Create a ASA Logical Device via CLI

You can create a standalone logical device for each security module/engine installed in the FXOS chassis.
1) Enter security services mode:
Firepower# scope ssa
2) Create the logical device:
Firepower /ssa # create logical-device device_name asa slot_id standalone
3) Enter a description for the logical device:
Firepower /ssa/logical-device* # set description "logical device
description"
4) Assign the management and data interfaces to the logical device:
Firepower /ssa/logical-device* # create external-port-link name
interface_name asa
Firepower-chassis /ssa/logical-device/external-port-link* # exit
5) Configure the management bootstrap information:
a) Create bootstrap object:
Firepower /ssa/logical-device* # create mgmt-bootstrap asa
b) Create enable password:
Firepower /ssa/logical-device/mgmt-bootstrap* # create bootstrap-key-
secret PASSWORD
c) Set password value:
Firepower /ssa/logical-device/mgmt-bootstrap/bootstrap-key-secret* # set
value
Value: password
d) Exit password configuration scope:
Firepower /ssa/logical-device/mgmt-bootstrap/bootstrap-key-secret* # exit
e) Configure management IP address:
Firepower /ssa/logical-device/mgmt-bootstrap* # create ipv4 slot_id
default
f) Set gateway address:
Firepower /ssa/logical-device/mgmt-bootstrap/ipv4* # set gateway
gateway_address
g) Set IP address and mask:
© 2016 Cisco Systems, Inc. All rights reserved.