Cisco Cisco Firepower 4120 Security Appliance 安装指南
Cisco Systems, Inc.
www.cisco.com
1
Cisco ASA for Firepower 4100
Quick Start Guide
Quick Start Guide
First Published:
March 21, 2016
Last Updated:
May 9, 2016
1. About the ASA for Firepower 4100
The Firepower 4100 security appliance includes a single security engine that can run the ASA application.
How the ASA Works with the Firepower 4100
The Firepower 4100 security appliance runs its own operating system called the Firepower eXtensible Operating
System (FXOS). You can configure hardware interface settings, smart licensing, and other basic operating
parameters using the Firepower Chassis Manager web interface or CLI.
System (FXOS). You can configure hardware interface settings, smart licensing, and other basic operating
parameters using the Firepower Chassis Manager web interface or CLI.
All physical interface operations are owned by the Firepower 4100, including establishing external EtherChannels.
You can create two types of interfaces: Data and Management. You can assign interfaces to the ASA either at the
time of deployment or later as needed. These interfaces use the same IDs on the Firepower 4100 as in the ASA
configuration. The Firepower 4100 delivers network traffic to the ASA over internal backplane EtherChannels.
You can create two types of interfaces: Data and Management. You can assign interfaces to the ASA either at the
time of deployment or later as needed. These interfaces use the same IDs on the Firepower 4100 as in the ASA
configuration. The Firepower 4100 delivers network traffic to the ASA over internal backplane EtherChannels.
When you deploy the ASA, the Firepower 4100 downloads an ASA image of your choice and establishes a default
configuration. You can deploy the ASA as either a standalone logical device, or as a cluster of ASAs on up to six
chassis.
configuration. You can deploy the ASA as either a standalone logical device, or as a cluster of ASAs on up to six
chassis.
ASA Management
When you deploy the ASA, you can pre-configure a management interface and management client information,
so that the deployed ASA allows ASDM access from that client.
so that the deployed ASA allows ASDM access from that client.
You can also access the ASA CLI from the Firepower 4100 CLI using an internal Telnet connection. From within
the ASA, you can later configure SSH or Telnet access over any of its management or data interfaces.
the ASA, you can later configure SSH or Telnet access over any of its management or data interfaces.
Note:
See
for licensing requirements for ASDM
access.
Licensing Requirements for the ASA for Firepower 4100
On the ASA for Firepower 4100, Smart Software Licensing configuration is split between the Firepower 4100 and
the ASA.
the ASA.
Firepower 4100—Configure all Smart Software Licensing infrastructure on the Firepower 4100, including
parameters for communicating with the License Authority. The Firepower 4100 itself does not require any
licenses to operate.
parameters for communicating with the License Authority. The Firepower 4100 itself does not require any
licenses to operate.