topic Re: Replace Primary FTD with new FTD in Network Security

Replace Primary FTD with new FTD

SaintEvn — Sun, 16 May 2021 08:16:46 GMT

Hi all,

We’ve deployed FTD HA managed by FMC. Last week the primary unit had failed and we are running with only secondary FTD.

And we are now planning to replace the primary unit with new FTD. Are there any ways to replace the unit without breaking the HA ? We don't have any backup for primary FTD .

Thank you all.

Re: Replace Primary FTD with new FTD

Sheraz.Salim — Sun, 16 May 2021 08:34:46 GMT

https://www.cisco.com/c/en/us/td/docs/security/firepower/601/configuration/guide/fpmc-config-guide-v601/fpmc-config-guide-v601_chapter_01100110.pdf

    1. Break the HA on FMC.
    2. De-register/delete the Primary unit from FMC.
    3. Power off and remove Primary unit Firepower device from rack after removing all network connections.
    4. Replace the power supply, fan and SSD from old Firepower unit to new.
    5. Rack the new unit and power on. Same management ip as old unit to be set via CLI.
    6. Deploy FTD on new unit with the same interfaces and register with FMC.
    7. Upgrade to same version and patch level as primary from FMC.
    8. Add them both as HA pair on FMC.
    9. Verify Failover functionality post change.

Re: Replace Primary FTD with new FTD

SaintEvn — Sun, 16 May 2021 08:38:49 GMT

Thank you so much . That's really helpful