topic Re: Migration from FP4110 to FP2140 in Network Security

Migration from FP4110 to FP2140

cisco11288702 — Tue, 30 Mar 2021 16:59:54 GMT

Hello,

We are upgrading to FP2140 from FP4110 and i have to copy all rules and VPN profiles to the new FP

My question is there any migration tool can assist in this or any other means to achieve this .

thanks

Re: Migration from FP4110 to FP2140

Marvin Rhoads — Tue, 30 Mar 2021 17:05:18 GMT

There's no migration tool for this use case.

ACP rules are easy - as long as you have the same zones setup on the new device just change or add the target device in FMC to include the new appliance. Similarly with remote access VPN - although you will have to do any certificate installation separately. Likewise for NAT policy.

The device settings (interfaces, routing etc.) will have to be recreated manually.

Re: Migration from FP4110 to FP2140

cisco11288702 — Tue, 30 Mar 2021 17:49:53 GMT

Do you instruction for adding new device to FMC and how to copy config and then remove the old one.

Re: Migration from FP4110 to FP2140

Marvin Rhoads — Wed, 31 Mar 2021 13:25:20 GMT

Adding devices is the standard way described here:

https://www.cisco.com/c/en/us/td/docs/security/firepower/670/configuration/guide/fpmc-config-guide-v67/device_management_basics.html#ID-2242-0000069d

Copying the configuration bits not handled in the ACP/NAT/VPN configs I already mentioned is done manually. Just edit the device after it has been added and change it to match what the old one had.