Step 1

Configure your DHCP server to assign an IP address to management port of the Firepower 4100/9300 chassis.

Step 2

Power on the Firepower 4100/9300 chassis.

Step 3

To configure your system using HTTPS:

1. Using a supported browser, enter the following URL in the address bar:

   https://<ip_address>/api

   where <ip_address> is the IP address of the management port on the Firepower 4100/9300 chassis that was assigned by your DHCP server.

   Note	For information on supported browsers, refer to the release notes for the version you are using (see http://www.cisco.com/c/en/us/support/security/firepower-9000-series/products-release-notes-list.html).

2. When prompted, log in with the username install and the password <chassis_serial_number>.

   The <chassis_serial_number> can be obtained by inspecting a tag on the chassis.

3. Complete the system configuration as prompted.

   • Strong password enforcement policy (for strong password guidelines, see User Accounts) .

   • Password for the admin account.

   • System name

   • Supervisor Management IPv4 address and subnet mask, or IPv6 address and prefix.

   • Default gateway IPv4 or IPv6 address.

   • Host/network address and netmask/prefix from which SSH access is allowed.

   • Host/network address and netmask/prefix from which HTTPS access is allowed.

   • DNS Server IPv4 or IPv6 address.

   • Default domain name.

4. Click Submit.

Step 4

To configure your system using SSH:

1. Connect to the management port using the following command:

   ssh install@<ip_address>

   where <ip_address> is the IP address of the management port on the Firepower 4100/9300 chassis that was assigned by your DHCP server.

2. When prompted, log in with the password Admin123.

3. Complete the system configuration as prompted.

   Note

   You can optionally enter the debug menu at any time during initial configuration to debug any setup issues or abort configurations and reboot the system. To enter the debug menu, press Ctrl-C. To exit the debug menu, press Ctrl-D twice. Note that anything you type in the interim between pressing Ctrl-D the first time and pressing it a second time will run after the second time Ctrl-D is pressed.

   Example:

   
               ---- Basic System Configuration Dialog ----
    
     This setup utility will guide you through the basic configuration of
     the system. Only minimal configuration including IP connectivity to
     the FXOS Supervisor is performed through these steps.
    
     Type Ctrl-C at any time for more options or to abort configuration
     and reboot system.
     To back track or make modifications to already entered values,
     complete input till end of section and answer no when prompted
     to apply configuration.
    
    
     You have chosen to setup a new Security Appliance.
           Continue? (yes/no): y
    
     Enforce strong password? (yes/no) [y]: n
    
     Enter the password for "admin": Farscape&32
     Confirm the password for "admin": Farscape&32
     Enter the system name:  firepower-9300
    
     Supervisor Mgmt IP address : 10.80.6.12
    
     Supervisor Mgmt IPv4 netmask : 255.255.255.0
    
     IPv4 address of the default gateway : 10.80.6.1
    
     The system cannot be accessed via SSH if SSH Mgmt Access is not configured.
   
     Do you want to configure SSH Mgmt Access? (yes/no) [y]: y
   
     SSH Mgmt Access host/network address (IPv4/IPv6): 10.0.0.0
   
     SSH Mgmt Access IPv4 netmask: 255.0.0.0
    
     Firepower Chassis Manager cannot be accessed if HTTPS Mgmt Access is not configured.
   
     Do you want to configure HTTPS Mgmt Access? (yes/no) [y]: y
   
     HTTPS Mgmt Access host/network address (IPv4/IPv6): 10.0.0.0
   
     HTTPS Mgmt Access IPv4 netmask: 255.0.0.0
    
     Configure the DNS Server IP address? (yes/no) [n]: y
    
       DNS IP address : 10.164.47.13
    
     Configure the default domain name? (yes/no) [n]: y
    
       Default domain name : cisco.com
    
     Following configurations will be applied:
    
       Switch Fabric=A
       System Name=firepower-9300
       Enforced Strong Password=no
       Supervisor Mgmt IP Address=10.89.5.14
       Supervisor Mgmt IP Netmask=255.255.255.192
       Default Gateway=10.89.5.1
       SSH Access Configured=yes
           SSH IP Address=10.0.0.0
           SSH IP Netmask=255.0.0.0
       HTTPS Access Configured=yes
           HTTPS IP Address=10.0.0.0
           HTTPS IP Netmask=255.0.0.0
       DNS Server=72.163.47.11
       Domain Name=cisco.com
    
     Apply and save the configuration (select 'no' if you want to re-enter)? (yes/no): y
     Applying configuration. Please wait...  Configuration file – Ok
   .....
    
   Initial Setup complete, Terminating sessions
   .Connection to <ip_address> closed.
   

Step 5

To configure your system using the FXOS REST API:

IPv4 REST API example:

{
    "fxosBootstrap": {
        "dns": "1.1.1.1",
        "domain_name": "cisco.com",
        "mgmt_gw": "192.168.0.1",
        "mgmt_ip": "192.168.93.3",
        "mgmt_mask": "255.255.0.0",
        "password1": "admin123",
        "password2": "admin123",
        "strong_password": "yes",
        "system_name": "firepower-9300",
        "https_mask": "2",
        "https_net": "::",
        "ssh_mask": "0",
        "ssh_net": "::"
    }
}


IPV6 REST API example

{
    "fxosBootstrap": {
        "dns": "2001::3434:4343",
        "domain_name": "cisco.com",
        "https_mask": "2",
        "https_net": "::",
        "mgmt_gw": "2001::1",
        "mgmt_ip": "2001::2001",
        "mgmt_mask": "64",
        "password1": "admin123",
        "password2": "admin123",
        "ssh_mask": "0",
        "ssh_net": "::",
        "strong_password": "yes",
        "system_name": "firepower-9300"
    }
}