topic Re: Replace FWSM with Firepower Appliance in Network Security

Replace FWSM with Firepower Appliance

Scott_22 — Thu, 18 Feb 2021 18:50:32 GMT

After migrating the configuration from the FWSM module to an FTD appliance, is there a specific process that needs to be followed so the traffic no longer flows to the FWSM? Is there a shutdown command, or do I simply shutdown each interface?

Re: Replace FWSM with Firepower Appliance

Marvin Rhoads — Fri, 19 Feb 2021 08:09:46 GMT

You can and should shut down the module.

hw-module module <module number> shutdown

Typically the FWSM had an association with the IOS-defined VLANs and was also the gateway for one or more subnets.

Assuming you have shutdown the L3 interfaces on the FWSM because you have moved them to FTD, you should still remove the VLAN associations in the IOS configuration.

no firewall module <module number> vlan-group <group number>
no firewall vlan-group <group number> <included VLANs>

Re: Replace FWSM with Firepower Appliance

Scott_22 — Fri, 19 Feb 2021 18:56:22 GMT

Exactly what I was looking for. Thank you!