Introduction to Cisco FTD Firepower Systems and installation

hey guys ansar sultan here from networkers today i am going to start new module the module mf name is ftd so in this video series i am going to focus on only the labs so these are overview about the ftd it's evaluation version of the snort the snort base ips and the source fire and it's required by the cisco on on our 2013 and is a rebranded to firepower the previously is known as a far slight and firepower you can see in the file power this fire this power is in a capital letter and the second one is a small letter and originally also is referred like a next generation firewall and gips nowadays this firewall is now often sold as a firepower threat defense means ftd and it's a combination of ngips and asa with additional features additional features i'll tell you okay and also known as the next generation firewall means this ftd is also known as the in next generation firewall and the ngips next generation intrusion previously system come to the next you can see here in the previously we have a two device with the two different operating system means two images in the first first device it's a our firewall as a firewall and the second device is our far power nexon ng ips in a later in relator in the we have one device in our one device but these are one device but in this one device we have two different images first image is a firewall as a firewall and the second image is a firepower ngo ips but nowadays we have we have one device with one image ftd and if the fdd is a combination of asan for power ngips it's a combination of this asa and ngo ips and this is a fpd feature so it's a asa features firepower features and other features in sa features we have a l2l for status stateful firewall application internet inspection net sel routing high availability and far power features ips abc url filtering amp and in other features we have a security intelligence and pre-filtering and more this is the ftd features okay and this is the device manager means how can we manage our device our f3d device so we have two ways first is the fdm and the second second one is fmc and this fmc is a and this fmc you can say it's recommended means if you want to configure your firewall f3d by using fdm so for each device you have a one fdm suppose in your environment totally you have a three device three f3d so for each and every ftd you have to config you have one fdm so by using this fdm you can configure only this device for this device you need another second one and for this device you need third fdm so if you have a more than two or three device so it's a very hard working like but by using fmc if you have a multiple devices in your premises like two three and four so you can centrally manage all the device by using fmc so it is recommended now come to the next okay now lab okay so in this in this lab i am going to do these two tasks first one is a configured ftd management management ip address to cli and the second one is configure fmc management ip address through the cli and for this lab my device user name is admin and the password is admin 123 a capital so come to the lab in this lab i need one fda ftd okay so select firepower and here you can see we have fmc ng ips fmc and f3d for this lab i need these two device fmc and f3d select ftd so again click node firepower fmc and also i am going to change your name fmc and for this for this lab i need one windows pc and four switch so quickly i am going to take all the devices so you can see quickly i configure this topology in this topology i have one ftd with the ipad ss 192 168 1.101 and i took a four switch and i deployed one fmc with the ip addresses 192 168 1 1.102 and one windows pc for getting gui access and the ipad assist.103 and this rest of threads which i am using in the future lab upcoming link upcoming lab so for this lab i am going to shut down on this three switch select stop stop now get the console of this f3d fmc and windows pc so this is my ftd username is admin and the password is capital a d m i n one two three so you can see here successfully login give some space and you can see here please and please enter yes or press enter to agree this ula agreement just hit enter now enter a new password so i have to change my password so for ftd i am going i am going to set password is f t d capital f t d and one two three i can confirm f t d one two three okay here is asking for prompt like you want to configure you want to configure your ipv4 ipv4 or not so yes we have to configure our ip addresses so hit enter because this by default is selected yes you can see here why so click on yes you want to configure your ipv6 no and configure ipv4 via dhcp or manual so you can see here by default your set is a manual so simply i'm going to hit enter here i have to assign my ip address so according to this topology my ipaddress is 192.168. 1.101 it entered yes and my subnet mask is less 24 so simply hit enter yes so here we have to define the gateway so my gateway is 192.168.1.2 this is my gateway you have to configure according to your topology hit enter okay enter the fully qualified hostname for this system so i am simply remaining this enter the fully qualified hostname for this system this is the firepower so simply i'm going to hit enter okay enter the comma separated list or if you have a if you have a dns server like 8.8.8 4.4.4 so you have to put here and if you have a more than one dns server so you have to mention like this 8.8 comma 4.4.4.4 so but according to this topology i don't have any dns server so simply i'm going to hit enter hold on i can type none i don't want if your network information has changed you will be need to connect okay just wait my configuration has been configured in our ftd so you can see here we get one more option manage the device locally it yes we're configuring the firewall mod to a router just wait now you can see now i am in a ftd this is a symbol by using this command i can show my network information so network you can see i configure the ipad as 190 to 168.1.101 and this is my default this is my subnet mask hit enter and you can also configure your ip address like configure network question mark you have to select here which ips you want to give ipv4 ipv6 so simply i am going to paste ipv4 again question mark so here it will be asking ok how can you are going to if you want to use dhcp so you can mention your dhcp or if you want to add ip address manually so you have to type manual here again question mark now here we have to mention 192.168.10102 or 101 and depend on your topology what iv address you want to assign here then subnet mask in the last you have to define your default gateway so this is the second method to assign the ip address first one is when you are when you are booting your fpd first time then it will be asking you some information okay you want to configure your file you're f3d or not what is your ip address what is your default gateway what is your dns okay that one is the first method and this is the second method when you are in ftd so you have to type this command configure network ipv4 manual your ip address subnet mask and default gateway and simply hit enter you can see now you can see my network settings change now fire so network okay you can see this is our network 101 and this is our default gateway and this is our subnet now come to the fmc same admin admin 123 and this fmc is a linux based operating system so here we have to first fire sudo sudo su as a super user the password is admin 123 now we have to configure our network so the command is when you press two time tab so you can see this much option we have so my command is configured configure network hit enter now it will be asking okay do you do you wish to configure ipv4 type yes y okay here we have to type ip address 192 168. 1.102 hit enter okay the management uh the management next march is slash 24 simply hit enter here we have to define our default gateway 192.168.1 simply hit enter okay are these settings are correct yes why hit enter do you wish to configure ipv6 no okay update network configuration okay took time okay uh let's check and it's a linux linux based operating system so how can we check the ip address if config hit enter and you can see here ethernet 0 and this is our iprs 192.168. 1.0 with the slash 24 subnet mask and now try to ping try to ping our ftd simply ping 192.168 192.168.1.101 okay 101 is my f3dip address hit enter you can see we have a successful reachability ctrl c for cancelling this ping now come to this windows pc login test123 here we have to assign the ip address change adapter setting property ipv4 and this windows pc ip address addresses 192.168.1.103 and the same default gateway i'm going to give triple to hit enter okay close and first check the reachability do we have reachability with our ftd and fmc so 192.168.1.101. so to the f3d we have and what about fmc so we have a successful reachability open the google chrome and try to get the gui access so https colon is less less ftd ip address one https colon is less less 192.168.1.101 this is my ftdip address and https columns less less htt ps colon 192.168.1.102 this is my fmcip address come to the first step advance proceed come to the second tab advance proceed so you can see here we have a successful which disability to the ftd and we got the gui access of ftd and same as it this fmc and this is the fmc gui so you can see here this is the faf so you can see here this is our firepower device management manager fdm so we can configure our ftd by using this ft fdm but for this lab i am going to use this fmc okay just for verification try to login admin and i changed my password so what is my password ftd123 hit enter okay this is the problem please try to manage login with the cli okay we have some issue no problem come to the fmc try to login admin admin 123 so you can see here we have successful reachability and our password is also correct so this is our lab we successfully got the gui access of f3d and fmc and we have a reachability from our windows pc to fmc and ftd so this is our lab and in upcoming lab in next video i am going to show like we can change our password we can also change our ip address and restore this thing so this is our lab thank you

Channel: NETWORKERSHOME

Views: 7,400

Keywords: Cisco FTD, Cisco FTD Firepower Systems and Installations

Id: cvaDGC4euqQ

Length: 18min 29sec (1109 seconds)

Published: Sun Aug 30 2020