Cisco Firepower 2100, Getting Started Manual

Page: 33 / 222

Review the Network Deployment, on page 31 . Pre-Configuration
Cable the Device, on page 33 . Pre-Configuration
Power on the Device, on page 35 . Pre-Configuration
Complete the FTD Initial Configuration Using the CLI, on page 41 . FTD CLI
Log Into the Firepower Management Center, on page 44 . Firepower
Management Center
Obtain Licenses for the FMC, on page 45 : Buy feature licenses. Cisco Commerce
Workspace
Obtain Licenses for the FMC, on page 45 : Generate a license token for the
FMC.
Smart Software
Manager
Obtain Licenses for the FMC, on page 45 : Register the FMC with the Smart
Licensing server.
Firepower
Management Center
Register the FTD with the FMC, on page 46 . Firepower
Management Center
Configure a Basic Security Policy, on page 49 . Firepower
Management Center
Review the Network Deployment
The dedicated Management 1/1 interface is a special interface with its own network settings. By default, the
Management 1/1 interface is enabled and configured as a DHCP client. If your network does not include a
DHCP server, you can set the Management interface to use a static IP address during initial setup at the console
port. You can configure other interfaces after you connect the FTD to FMC.
In 6.5 and earlier, the Management interface is configured with an IP address (192.168.45.45).
Note
See the following sample network deployments for ideas on how to place your FTD device in your network.
Separate Management Network
Both the FMC and FTD require internet access from management for licensing and updates.
The following figure shows a possible network deployment for the Firepower 2100 where the FMC and
management computer connect to the management network. The management network has a path to the
internet for licensing and updates.
Cisco Firepower 2100 Getting Started Guide
31
Firepower Threat Defense Deployment with FMC
Review the Network Deployment