Posts

Showing posts from June, 2021

Firepower 2100/1100 FTD/ASA initial setup, reimage, upgrade.

  Chassis FXOS and FTD share same management IP (default 192.168.45.45) Chassis FXOS (192.168.45.45) and ASA ()use different management IP although on same physical interface. SSH to FXOS/FTD are on FTD CLI prompt, go to FXOS using the  connect fxos  command Console to Chassis is on FXOS CLI prompt, go to FTD using the  connect ftd  command The Firepower 1100 does not support the FXOS Firepower Chassis Manager; only a limited CLI is supported for troubleshooting purposes. The Firepower 2100 runs an underlying operating system called the Firepower eXtensible Operating System (FXOS).  If you run ASA on Firepower 2100, ASA can be in the following modes: Appliance mode (the default after ASA 9.13)—Appliance mode lets you configure all settings in the ASA. Only advanced troubleshooting commands are available from the FXOS CLI. See the  FXOS troubleshooting guide  for more information. Firepower Chassis Manager is not supported . ciscoasa# connect fxos [admin] Connecting to fxos. Connected

Firepower 1100/2100 ASA active/active upgrade

 Upgrade an Active/Active Failover Pair Using the CLI To upgrade two units in an Active/Active failover configuration, perform the following steps on the Firepower 1000 or 2100 in Appliance mode. Before you begin Perform these steps on the primary unit . Perform these steps in the system execution space . Procedure Step 1 On the primary unit in privileged EXEC mode, copy the ASA software to flash memory: asa/act/pri# copy ftp://username:password@ip-address/cisco-asa-fp1k.9.14.1.SPA disk0:/cisco-asa-fp1k.9.14.1.SPA Step 2 Copy the software to the secondary unit; be sure to specify the same path as for the primary unit: asa/act/pri# failover exec mate copy /noconfirm ftp://username:password@ip-address/cisco-asa-fp1k.9.14.1.SPA disk0:/cisco-asa-fp1k.9.14.1.SPA Step 3 Copy the ASDM image to the primary unit flash memory: asa/act/pri# ciscoasa# copy ftp://username:password@ip-address/asdm-7141.bin disk0:/asdm-7141.bin Step 4 Copy the ASDM image to the secondary unit; be sure to spec