topic Firepower Management Center High availability in Network Security

Firepower Management Center High availability

Learnercisco — Thu, 03 Sep 2020 14:57:39 GMT

Hi Tech Guys,

I have the folowing devices in my Edge Network design.

2x FMC 1000 Series (Active/Standby)

2x 2100 FTD (Activity/Standby)

i am facing problem in FMC High availability, when the Primary FMC down, Seconday FMC is not taking over the role and FTDs are not showing on the Secondary FMC. FTDs Still connects with Primary FMC when its power up again.

FMC HA is not working.

any body face this problem.

The FMC/FTD Code is 6.3

Thanks in advance.

Re: Firepower Management Center High availability

mohanB — Thu, 03 Sep 2020 15:24:38 GMT

When the primary Firepower Management Center fails, you must promote the secondary Firepower Management Center to become the active unit. So its not automatic, manual steps by User. Under System/Integration/High Availability, "switch peer roles" button.

Re: Firepower Management Center High availability

balaji.bandi — Thu, 03 Sep 2020 15:28:46 GMT

Is this straight 6.3 deployment to upgraded ? can you share configuraition screenshot ? Do you see they SYNC ? (6.3.0 have some bug of Sync so worth looking or worth upgrading to 6.4 or upper version)

https://www.cisco.com/c/en/us/td/docs/security/firepower/610/configuration/guide/fpmc-config-guide-v61/firepower_management_center_high_availability.html#id_21197

Re: Firepower Management Center High availability

Learnercisco — Thu, 03 Sep 2020 15:49:59 GMT

Hi Mohan B

Thanks for the reply,

I suppose there will be automatic failover and manual fallback solution in the FMC.

Thanks for confirmation

Re: Firepower Management Center High availability

Learnercisco — Thu, 03 Sep 2020 16:07:45 GMT

Hi balaji,

Thanks for your reply,

The firewpower system is already equipped 6.3 code. Can I upgrade to 6.6 rather than 6.4?