Deploying With Network Routes - Cisco 7010 Installation Manual

Chapter 2 Deploying on a Management Network

Deploying with Network Routes

The following graphic shows the management traffic channel and the event traffic channel over two
management interfaces.
You can use a dedicated management interface to carry only event traffic from multiple devices. In this
configuration, each device is registered to a different management interface to carry the management
traffic channel, and one management interface on the Management Center carries all event traffic
channels from all devices. If an interface fails, traffic reroutes to the active interface and the connection
is maintained. Note that because event traffic for all devices is carried on the same interface, traffic is
not isolated between networks.
The following graphic shows two devices using different management channel traffic interfaces sharing
the same dedicated interface for event traffic channels.
Deploying with Network Routes
You can create a route from a specific management interface on your Management Center to a different
network. When you register a device from that network to the specified management interface on the
Management Center, you provide an isolated connection between the Management Center and the device
on a different network. Configure both traffic channels to use the same management interface to ensure
that traffic from that device remains isolated from device traffic on other networks. Because the routed
interface is isolated from all other interfaces on the Management Center, if the routed management
interface fails, the connection is lost.
You must register a device to the static IP address of any management interface other than the default
Tip
( ) management interface. DHCP is supported only on the default management interface.
eth0
After you install your Management Center, you configure multiple management interfaces using the web
interface. See Configuring Appliance Settings in the Firepower Management Center Configuration
Guide for more information.
Firepower 7000 and 8000 Series Installation Guide
2-4