Firepower 7

Versions this guide is based on:

EVE Image foldername Downloaded Filename vCPUs vRAM Interfaces NIC Type Console HDD Format Qemu
ftd7-FTD-7.2.1-40 Cisco_Secure_Firewall_Threat_Defense_Virtual-7.2.1-40.qcow2 4 8192 6-8 virtio-pci-net vnc virtioa 5.2.0
fmc7-7.2.1-40 Cisco_Secure_FW_Mgmt_Center_Virtual_KVM-7.2.1-40.qcow2 4 28762 1 virtio-pci-net vnc/https virtioa 5.2.0
fips7-ngips-7.0.1.84 Cisco_Firepower_NGIPS_VMware-7.0.1-84.tar.gz 4 8192 3 e1000 vnc/https sataa 2.4.0

Note: For EVE-NG Qemu devices mandatory is the first part of foldername : fmc7- or ftd7- . After the hyphen (-) you can add any your image version or name. Example for version 7.3 FTD foldername will be: ftd7-FTD-7.3.0-69, for FMC node: fmc7-7.3.0-69 and for NGIPS node: fips7-ngips-7.0.1.84

Instructions
Other versions also are supported following bellow’s procedure.

Steps below are based on FirePower 7.2 and 7.0 NGIPS deployment, for other image deployment, use proper names respectively.You  Have to use your own cisco CCO to download images and obtain demo licences.

1. Deployment of Cisco_Secure_FW_Mgmt_Center_Virtual_KVM-7.2.1-40

SSH to EVE and login as root, from cli and create image directory on the EVE:

Create new image folder:

mkdir /opt/unetlab/addons/qemu/fmc7-7.2.1-40

Upload the downloaded Cisco_Secure_FW_Mgmt_Center_Virtual_KVM-7.2.1-40.qcow2 image to the /opt/unetlab/addons/qemu/fmc7-7.2.1-4  using  FileZilla or WinSCP. Rename it to virtioa.qcow2:

cd /opt/unetlab/addons/qemu/fmc7-7.2.1-40
mv Cisco_Secure_FW_Mgmt_Center_Virtual_KVM-7.2.1-40.qcow2 virtioa.qcow2

Fix permissions:

/opt/unetlab/wrappers/unl_wrapper -a fixpermissions

 

2. Deployment of Cisco_Secure_Firewall_Threat_Defense_Virtual-7.2.1-40.qcow2

SSH to EVE and login as root, from cli and create image directory on the EVE:

mkdir /opt/unetlab/addons/qemu/ftd7-FTD-7.2.1-40

Upload the downloaded Cisco_Secure_Firewall_Threat_Defense_Virtual-7.2.1-40.qcow2 image to the /opt/unetlab/addons/qemu/ftd7-FTD-7.2.1-40  using  FileZilla or WinSCP. Rename it to virtioa.qcow2:

cd /opt/unetlab/addons/qemu/ftd7-FTD-7.2.1-40
mv Cisco_Secure_Firewall_Threat_Defense_Virtual-7.2.1-40.qcow2 virtioa.qcow2

Fix permissions:

/opt/unetlab/wrappers/unl_wrapper -a fixpermissions

 

3. Deployment of Cisco_Firepower_NGIPS_VMware-7.0.1-84

SSH to EVE and login as root, from cli and create image directory on the EVE:

mkdir /opt/unetlab/addons/qemu/fips7-ngips-7.0.1.84

Upload the downloaded Cisco_Firepower_NGIPS_VMware-7.0.1-84.tar.gz image to the /opt/unetlab/addons/qemu/fips7-ngips-7.0.1.84  using  FileZilla or WinSCP. Follow the commands below (yellow) to convert vmdk vmware image to sataa.qcow2:

### Unzip archive NGIPS Cisco file
root@master:~# cd /opt/unetlab/addons/qemu/fips7-ngips-7.0.1.84
root@master:/opt/unetlab/addons/qemu/fips7-ngips-7.0.1.84# tar -xzf Cisco_Firepower_NGIPS_VMware-7.0.1-84.tar.gz
###Check the unzipped files, your interest is vmdk file
root@master:/opt/unetlab/addons/qemu/fips7-ngips-7.0.1.84# ls
Cisco_Firepower_NGIPS_VMware-7.0.1-84-disk1.vmdk Cisco_Firepower_NGIPS_VMware-ESXi-7.0.1-84.mf Cisco_Firepower_NGIPS_VMware-VI-7.0.1-84.mf
Cisco_Firepower_NGIPS_VMware-7.0.1-84.tar.gz Cisco_Firepower_NGIPS_VMware-ESXi-7.0.1-84.ovf Cisco_Firepower_NGIPS_VMware-VI-7.0.1-84.ovf
root@master:/opt/unetlab/addons/qemu/fips7-ngips-7.0.1.84#
### Convert vmdk file to the Linux sataa.qcow2
root@master:/opt/unetlab/addons/qemu/fips7-ngips-7.0.1.84# qemu-img convert -f vmdk -O qcow2 Cisco_Firepower_NGIPS_VMware-7.0.1-84-disk1.vmdk sataa.qcow2
root@master:/opt/unetlab/addons/qemu/fips7-ngips-7.0.1.84# ls
Cisco_Firepower_NGIPS_VMware-7.0.1-84-disk1.vmdk Cisco_Firepower_NGIPS_VMware-ESXi-7.0.1-84.mf Cisco_Firepower_NGIPS_VMware-VI-7.0.1-84.mf sataa.qcow2
Cisco_Firepower_NGIPS_VMware-7.0.1-84.tar.gz Cisco_Firepower_NGIPS_VMware-ESXi-7.0.1-84.ovf Cisco_Firepower_NGIPS_VMware-VI-7.0.1-84.ovf
root@master:/opt/unetlab/addons/qemu/fips7-ngips-7.0.1.84#
###Remove all unnecessary files
root@master:/opt/unetlab/addons/qemu/fips7-ngips-7.0.1.84# rm -f Cisco*
root@master:/opt/unetlab/addons/qemu/fips7-ngips-7.0.1.84# ls
sataa.qcow2
root@master:/opt/unetlab/addons/qemu/fips7-ngips-7.0.1.84# 

Fix permissions:

/opt/unetlab/wrappers/unl_wrapper -a fixpermissions