Cisco Firepower 1010 (FTD) Initial Setup
Jun16

Cisco Firepower 1010 (FTD) Initial Setup

KB ID 0001678   If you’re here you’ve either purchased a new Cisco Firepower device running FTD (FirePower Threat Defence) or have re-imaged your Firepower device from ASA to FTD code. On its factory defaults, the unit will have the following settings. Inside IP address (VLAN 1) 192.168.1.1 (on all interfaces from 2 to 8). Outside IP Address set to DHCP in interface 1. Management IP address 192.168.45.1 on the Management...

Read More
DHCP Scope: Full of BAD_ADDRESS Entries
Feb05

DHCP Scope: Full of BAD_ADDRESS Entries

KB ID 0001651 Problem I had a client machine struggling to get an DHCP address, and when I looked in DHCP the scope it was full of this; BAD_ADDRESS This address Is Already in Use Solution A tour of Google and forums is full of posts by people with this problem, and other than, ‘Oh I looked in the logs and fixed it’ (with no mention of what log, or where this log was), or ‘Yeah I used Wireshark and located a problem...

Read More
How Do I Find/Change My IP Address?
Jan17

How Do I Find/Change My IP Address?

KB ID 0000208 What’s an IP address? An IP address is the address used on a network to find your PC, Server, Laptop, or Printer etc. It’s the networking equivalent of your house number and post code (or Zip Code for visitors from over the pond). Do you want your PUBLIC or PRIVATE IP address? As we started to run out of addresses, there were a number of solutions that we came up with, one you will see below (DHCP) the other...

Read More
Cisco ASA Site to Site IKEv2 VPN Static to Dynamic
Oct01

Cisco ASA Site to Site IKEv2 VPN Static to Dynamic

KB ID 0001602 Problem Site to Site VPNs are easy enough, define some interesting traffic, tie that to a crypto map, that decides where to send the traffic, create some phase 1 and phase 2 policies, wrap the whole lot up in a tunnel-group, and you’re done! But there needs to be a ‘peer address’ in the crypto map, and if one end of the VPN is on DHCP that address is likely to change, so you cant supply that? The...

Read More
Cisco IOS – DHCP Helper (DHCP Relay) – IP-Helper Setup
Mar23

Cisco IOS – DHCP Helper (DHCP Relay) – IP-Helper Setup

KB ID 0001168  Problem Cisco documentation calls this a ‘DHCP Relay’, and uses the command IP-Helper, and I usually call this DHCP Helper, just to confuse everyone. To be fair the term DHCP Relay is an industry standard, it’s not particular to Cisco (as you will see later when I Wireshark the traffic). So If you are reading this you have a DHCP server and you want to use it to lease addresses to clients that are on a...

Read More