Register With a New Management Center

This procedure shows how to register with a new Cloud-Delivered Firewall Management Center. You should perform these steps even if the new Cloud-Delivered Firewall Management Center uses the old Cloud-Delivered Firewall Management Center's IP address.

Procedure


Step 1

On the old Cloud-Delivered Firewall Management Center, if present, delete the managed device.

You cannot change the Cloud-Delivered Firewall Management Center IP address if you have an active connection with the Cloud-Delivered Firewall Management Center.

Step 2

Connect to the device CLI, for example using SSH.

Step 3

Configure the new Cloud-Delivered Firewall Management Center.

configure manager add {hostname | IPv4_address | IPv6_address | DONTRESOLVE } regkey [nat_id] [display_name]

  • {hostname | IPv4_address | IPv6_address}—Sets the Cloud-Delivered Firewall Management Center hostname, IPv4 address, or IPv6 address.

  • DONTRESOLVE —If the Cloud-Delivered Firewall Management Center is not directly addressable, use DONTRESOLVE instead of a hostname or IP address. If you use DONTRESOLVE , then a nat_id is required. When you add this device to the Cloud-Delivered Firewall Management Center, make sure that you specify both the device IP address and the nat_id ; one side of the connection needs to specify an IP address, and both sides need to specify the same, unique NAT ID.

  • regkey —Make up a registration key to be shared between the Cloud-Delivered Firewall Management Center and the device during registration. You can choose any text string for this key between 1 and 37 characters; you will enter the same key on the Cloud-Delivered Firewall Management Center when you add the Firewall Threat Defense.

  • nat_id —Make up an alphanumeric string from 1 to 37 characters used only during the registration process between the Cloud-Delivered Firewall Management Center and the device when one side does not specify an IP address. This NAT ID is a one-time password used only during registration. Make sure the NAT ID is unique, and not used by any other devices awaiting registration. Specify the same NAT ID on the Cloud-Delivered Firewall Management Center when you add the Firewall Threat Defense.

  • display_name —Provide a display name for showing this manager with the show managers command. This option is useful if you are identifying Security Cloud Control as the primary manager and an on-prem Cloud-Delivered Firewall Management Center for analytics only. If you don't specify this argument, the firewall auto-generates a display name using one of the following methods:

    • hostname | IP_address (if you don't use the DONTRESOLVE keyword)

    • manager-timestamp

Example:


> configure manager add DONTRESOLVE abc123 efg456
Manager successfully configured.
Please make note of reg_key as this will be required while adding Device in FMC.

>

Step 4

Add the device to the Cloud-Delivered Firewall Management Center.