Complete the FTD Initial Configuration Using the CLI
Connect to the device's CLI to perform initial setup, including setting the management IP address, gateway, and other basic networking settings using the setup wizard. The dedicated management interface is a special interface with its own network settings. If you do not want to use the management interface, you can use the CLI to configure a data interface instead.
Note | If you use a data interface for management, then you must specify the NAT ID on both the FTD and CDO for registration. |
Before you begin
This procedure applies to all models except for the Firepower 4100/9300.
Procedure
Step 1 | Connect to the FTD CLI, either from the console port or using SSH to the Management interface. If you intend to change the network settings, we recommend using the console port so you do not get disconnected. (Firepower 1000/2100, FTD) The console port connects to the FXOS CLI. The SSH session connects directly to the FTD CLI. | ||||
Step 2 | Log in with the username admin and the password Admin123. (Firepower 1000/2100, Secure Firewall 3100) At the console port, you connect to the FXOS CLI. The first time you log in to FXOS, you are prompted to change the password. This password is also used for the FTD login for SSH.
Example:
| ||||
Step 3 | (Firepower 1000/2100, Secure Firewall 3100) If you connected to FXOS on the console port, connect to the FTD CLI. connect ftd Example:
| ||||
Step 4 | The first time you log in to the device, you are prompted to accept the End User License Agreement (EULA) and, if using an SSH connection, to change the admin password. You are then presented with the CLI setup script.
Defaults or previously entered values appear in brackets. To accept previously entered values, press Enter.
See the following guidelines:
| ||||
Step 5 | (Optional) Configure a data interface for CDO access. configure network management-data-interface You are then prompted to configure basic network settings for the data interface.
See the following details for using this command. See About Data Interfaces for more informatio.
Example:
Example:
| ||||
Step 6 | (Optional) Limit data interface access to CDO on a specific network. configure network management-data-interface client ip_address netmask By default, all networks are allowed. |