Difference between revisions of "Firewall"
From AlphaBook
Line 20: | Line 20: | ||
* Identity—The realm provides user identity and group membership information, which you can then use in access control rules | * Identity—The realm provides user identity and group membership information, which you can then use in access control rules | ||
* Remote access VPN—The realm provides authentication services, which determine whether a connection is allowed | * Remote access VPN—The realm provides authentication services, which determine whether a connection is allowed | ||
+ | == Configure VLAN Subinterfaces and 802.1Q Trunking == |
Latest revision as of 14:46, 15 November 2018
Contents
Firepower Initial Configuration
- Configure PC (no internet) as below:
- IP address: 192.168.45.2
- Netmask: 255.255.255.0
- Gateway: 192.168.45.1
- Connect to management port
- Access appliance's default IP address: https://192.168.45.45
- Username: admin
- Password: Admin123
- Setup Outside Interface / Management Interface / Time Zone / NTP Time Server
- Firepower 2100 default port
- Outside Interface: Ethernet1/1
- Inside Interface: Ethernet1/2
Zone
- After initial configuration, there are inside_zone and outside_zone
- Each interface must belong to a zone, because you configure policies based on security zones, not interfaces
- Create interface, then create zone, and add the interface
Configure AD Identity Realms
- Objects -> Identity Realm
- Identity—The realm provides user identity and group membership information, which you can then use in access control rules
- Remote access VPN—The realm provides authentication services, which determine whether a connection is allowed