onsite we have a cisco firepower 2140 device which run ASA
as we try to modify the 2140 OOB mgmt ip by CLI, we got an error
why ?
经过查询发现,需要进入ASA里面打上以下这条命令,并重启ASA
1 修改模式并重启
ciscoasa# configure terminal
ciscoasa(config)#
ciscoasa(config)# no fxos mode appliance
Mode set to platform mode
WARNING: This command will take effect after the running-config is saved and the system has been rebooted. Command accepted.ciscoasa(config)# write memoryBuilding configuration...
Cryptochecksum: c0532471 648dc7c2 4f2b4175 1f16268423736 bytes copied in 1.520 secs (23736 bytes/sec)
[OK]ciscoasa(config)# reload
Proceed with reload? [confirm]
2 重启后查看当前模式
ciscoasa(config)# show fxos mode
Mode is currently set to platform
3 这时再次设置out-of-band 不再报错
firepower-2140# scope fabric-interconnect a
firepower-2140 /fabric-interconnect # set out-of-band static ip 10.248.1.211 netmask 255.255.255.128 gw 10.248.1.254
确认已经生效
firepower-2140# scope fabric-interconnect a
firepower-2140 /fabric-interconnect # show Fire Power:ID OOB IP Addr OOB Netmask OOB Gateway OOB IPv6 Address Prefix OOB IPv6 Gateway Operability---- --------------- --------------- --------------- ---------------- ------ ---------------- -----------A 10.248.1.211 255.255.255.128 10.248.1.254 :: 64 :: Operable
firepower-2140 /fabric-interconnect #
3 如果又要返回原来的appliance模式,使用以下命令
ciscoasa(config)# fxos mode appliance
Mode set to appliance mode
WARNING: This command will take effect after the running-config is saved and the system has been rebooted. Command accepted.
ciscoasa(config)# write memory
Building configuration...
Cryptochecksum: c0532471 648dc7c2 4f2b4175 1f16268423736 bytes copied in 1.520 secs (23736 bytes/sec)
[OK]
ciscoasa(config)# reload
Proceed with reload? [confirm]
来看下思科官方的说明
为便于理解,下面附上中文翻译
链接
https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/fp2100/firepower-2100-gsg/asa-platform.html
Enable Platform Mode
The Firepower 2100 runs in Appliance mode by default. This procedure tells you how to change the mode to Platform mode, and optionally how to change it back to Appliance mode.
When you change the mode, the configuration is cleared and you need to reload the system. The default configuration is applied upon reload.
启用平台模式
默认情况下,Firepower 2100 在设备模式下运行。 此过程告诉您如何将模式更改为平台模式,以及如何将其更改回设备模式(可选)。
当您更改模式时,配置将被清除,您需要重新加载系统。 重新加载时将应用默认配置。