Initial Setup for Cisco FPR-2100 to Run LINA (ASA)

This is a quick run through in standing up a 2100 series firepower appliance. In this case I will be using an FPR-2130 device in the example.


  • Tools:
    • Console cable
    • Ethernet cable
    • SmartNET agreement for code
    • The obvious, firepower device

From your local laptop/etc device, connect the ethernet cable to the management interface on the firepower unit. You can simply let your laptop interface utilize dhcp, which will grab an address in the 192.168.45.x range. (The firepower chassis manager is found at


From here, log in using the default credentials: admin // Admin123. You are then greeted by the overview tab that gives a quick look at faults, interfaces, context devices, and the local peer inventory of the 2130 device.

The tab interfaces, is one notable place in the management view. The interfaces presented to things such as your ASA will need to first be enabled from within this sub section.


For instance, Id like to use the ten gig interfaces on the ASA, Id toggle the associated interface here on the interfaces page. (Note that within the ASA code, you will still need to no shut the interface as normal configuration).


For this example and since this particular unit will only run LINA (ASA) code, I have gone under platform settings and for now, disabled NTP and manually set the time sync.


Next, under system > user management make sure to change the user password from default.


Head on over to system, > upgrades, and this is where we will upgrade the LINA (ASA) code, in this case we are going from 9.8.2 > 9.8.2(20). Select the shaded box that says upgrade when hovered over to upgrade to the particular code you want.


Side by side you can see the ASA if you open up a local console to the device and type connect asa to enter the asa context mode. To go back to the firepower extensible OS, from ASA privileged mode run connect fxos

You can attempt to go back to the asa, and it may give you the following if the code is still in upgrade process and not yet installed or not yet started.

You can now do a sh ver and see that it is now running the upgraded code.

You can also see the the appliance management shows is the new installed code.

Scroll to Top