Cisco Cisco Firepower Management Center 4000 설치 가이드

CBS(conf-cct-vapgroup)# management-circuit

CBS(conf-cct-vapgroup)# ip 10.1.16.107/24 10.1.16.255

 

increment-per-vap 10.1.16.110

CBS(conf-cct-vapgroup-ip)# exit

CBS(conf-cct-vapgroup)# exit

CBS(conf-cct-vapgroup-ip)# end

CBS#

When XOS V10.0 or later is configured for Series-9 operating mode, the 

increment-per-vap parameter

 

supports IPv4 or IPv6 addresses. For more information, see the XOS V10.0 Release Notes. 

Create a management circuit by entering:

CBS# configure circuit mgmt domain_ID

where 

 

is the name of the management circuit.

If the sensing circuit monitors management traffic, Cisco and Blue Coat recommend specifying an 
alternate 

 

for the management circuit. By default, all circuits belong to 

domain 1

. The 

following example uses 

domain 2

 

as the domain ID:

CBS# configure circuit mgmt domain 2

Set the circuit type for the management circuit to 

link-state-resistant

 and assign a device name, by 

entering the following commands separately and in this sequence:

CBS(conf-cct)# link-state-resistant

CBS(conf-cct)# device-name device_name

where 

device_name 

is the name of the device.

For example, to set the circuit type to 

link-state-resistant

 

and set the device name to 

mgmt

, enter the 

following:

CBS(conf-cct)# link-state-resistant

CBS(conf-cct)# device-name mgmt

Do 

not create a circuit or device name that starts with a numeric character.

Add a VAP group to the circuit you just created by entering the following:

CBS(conf-cct)# vap-group vap_group_name

where 

 

is the name of the VAP group you want to add to the circuit.

For example, to add the VAP group named 

ABC

, enter the following:

CBS(conf-cct)# vap-group ABC

Mark the circuit as a management circuit by entering the following command:

CBS(conf-cct-vapgroup)# management-circuit

Assign IP addresses to the VAPs in the VAP group you just added to the management circuit, by entering 
the following command:

CBS(conf-cct-vapgroup)# ip vap_ip+subnet_mask 

    broadcast_address increment-per-vap last_ip_in_subnet 

where 

 is the first IP address and subnet mask you want to assign to the VAP, 

 is the broadcast address of that IP address, and 

 

is the last IP 

address you want to use in that VAP group. 

In this scenario, there are two VAPs in the VAP group named 

ABC

, and you must assign two IP addresses. 

You also want to preserve two additional IP addresses for potential expansion of the VAP group.