ASA Deployment with ASDM
To set the gateway to the ASA data interfaces, set the gw to 0.0.0.0. This is the default setting.
Example:
firepower-2110 /fabric-interconnect # set out-of-band static ip 192.168.4.1 netmask
255.255.255.0
Warning: When committed, this change may disconnect the current CLI session
firepower-2110 /fabric-interconnect* #
Step 4
Configure an IPv6 management IP address and gateway.
a) Set the scope for fabric-interconnect a, and then the IPv6 configuration.
scope fabric-interconnect a
scope ipv6-config
Example:
firepower-2110# scope fabric-interconnect a
firepower-2110 /fabric-interconnect # scope ipv6-config
firepower-2110 /fabric-interconnect/ipv6-config #
b) View the current management IPv6 address.
show ipv6-if
Example:
firepower-2110 /fabric-interconnect/ipv6-config # show ipv6-if
Management IPv6 Interface:
c) Configure a new management IPv6 address and gateway:
Firepower-chassis /fabric-interconnect/ipv6-config # set out-of-band static ipv6 ipv6_address ipv6-prefix
prefix_length ipv6-gw gateway_address
To keep the currently-set gateway, omit the ipv6-gw keyword. Similarly, to keep the existing management
IP address while changing the gateway, omit the ipv6 and ipv6-prefix keywords.
To set the gateway to the ASA data interfaces, set the gw to ::. This is the default setting.
Example:
firepower-2110 /fabric-interconnect/ipv6-config # set out-of-band static ipv6 2001:DB8::34
ipv6-prefix 64 ipv6-gw 2001:DB8::1
firepower-2110 /fabric-interconnect/ipv6-config* #
Step 5
Delete and add new access lists for HTTPS, SSH, and SNMP to allow management connections from the new
network.
a) Set the scope for system/services.
scope system
IPv6 Address
----------------------------------- ---------- ------------
::
(Optional) Change the FXOS and ASA Management IP Addresses or Gateway
Prefix
IPv6 Gateway
::
::
Cisco Firepower 2100 Getting Started Guide
199