FirePower FTD加入FMC設定

FirePower FTD加入FMC設定 

*FTD加入FMC需要使用MGMT埠 

*FMC及FTD都需啟用NTP功能,否則會加入失敗 

 

ssh或console進入FTD cli 

 

>configure manager add 192.168.0.221 cisco 

後面的cisco是驗證keys 

 

Manager successfully configured. 

Please make note of reg_key as this will be required while adding Device in FMC. 

//加入前需要把防毒,IPS,檔案管理功能在smart license裡disable並Delpoy 

 

> show managers  //查看FMC設定狀態 

 

Host                                : 192.168.0.221 

Registration Key          : **** 

Registration                  : pending 

RPC Status                    : 

Type                               : Manager 

Host                               : 192.168.0.221 

Registration                 : Pending 

 

下一步登入FMC新增設備 

 

FMC 

 

 

 

 

 

 

 

 

回到FTD 

 

> show managers 

Type                      : Manager 

Host                      : 192.168.0.221 

Registration              : Completed 

 

//控管完成 

 

 

 

離開FMC回到本地管理 

 

> configure manager delete 

 

If you enabled any feature licenses, you must disable them in Firepower Device Manager before deleting the local manager. Otherwise, those licenses remain assigned to the device in Cisco Smart Software Manager. 

Do you want to continue[yes/no] yes 

DCHP Server Disabled 

//離開FMC前需要把防毒,IPS,檔案管理功能在FMC>smart license>edit License裡刪除設備並Delpoy

 

> show managers 

No managers configured. 

 

> configure manager local