Cisco Cisco Firepower 9300 Security Appliance Guía De Instalación
Cisco ASA for Firepower 9300 Quick Start Guide
2. Deploy the ASA
2
Licensing Requirements for the Firepower 9300 ASA Security Module
For the ASA on the Firepower 9300, Smart Software Licensing configuration is split between the Firepower 9300
supervisor and the ASA.
supervisor and the ASA.
Firepower 9300—Configure all Smart Software Licensing infrastructure in the supervisor, including parameters
for communicating with the License Authority. The Firepower 9300 itself does not require any licenses to
operate.
for communicating with the License Authority. The Firepower 9300 itself does not require any licenses to
operate.
ASA—Configure all license entitlements in the ASA, including the required Standard tier license. Other optional
licenses are also available. (FXOS 1.1.3 and later) The Strong Encryption license is automatically enabled for
qualified customers when you apply the registration token on the Firepower 9300, so no additional action is
required.
licenses are also available. (FXOS 1.1.3 and later) The Strong Encryption license is automatically enabled for
qualified customers when you apply the registration token on the Firepower 9300, so no additional action is
required.
Note:
For FXOS 1.1.2 and earlier, and for 1.1.3 and later Smart Software Manager satellite deployments, before
you can use ASDM (and features such as VPN) you must enable the Strong Encryption (3DES/AES) license by
requesting the entitlement within the ASA software. You must perform this task from the ASA CLI, which is
accessible from the FXOS CLI. For an evaluation license, you cannot receive a Strong Encryption license.
requesting the entitlement within the ASA software. You must perform this task from the ASA CLI, which is
accessible from the FXOS CLI. For an evaluation license, you cannot receive a Strong Encryption license.
2. Deploy the ASA
You can deploy a standalone ASA or a cluster of ASAs using the Firepower Chassis Manager. For CLI procedures,
see the FXOS Configuration Guide.
see the FXOS Configuration Guide.
Configure a Management Interface and Data Interfaces
Configure a Management type interface on the supervisor that you can include in the deployment configuration for
the ASA. You must also configure at least one Data type interface.
the ASA. You must also configure at least one Data type interface.
Procedure
1.
Choose Interfaces to open the Interfaces page.
2.
To add an EtherChannel:
a.
Click Add Port Channel.
b.
For the Port Channel ID, enter a value between 1 and 47.
c.
Leave Enable checked.
d.
For the Type, choose Management or Data. You can only include one management interface per logical
device. Do not choose Cluster.
device. Do not choose Cluster.
e.
Add member interfaces as desired.
f.
Click OK.
3.
For a single interface:
a.
Click the Edit icon in the interface row to open the Edit Interface dialog box.
b.
Check Enable.
c.
For the Type, click Management or Data. You can only include one management interface per logical
device.
device.
d.
Click OK.