topic Re: FTD Clustering with Firepower 3140 in Network Security

FTD Clustering with Firepower 3140

hadeelOth81 — Thu, 11 Apr 2024 18:02:08 GMT

Hi All,

I'm planning to add a new FTD cluster (FP 3140) and manage it through the current FMC which is used to manage 4145 cluster. Can I create the cluster in the FXOS (through Chassis Manager) ? Or it should exclusively be added through FMC?

Thank you

Re: FTD Clustering with Firepower 3140

Rob Ingram — Thu, 11 Apr 2024 18:05:12 GMT

Hi @hadeelOth81 you configure the clustering of the FTDs from the FMC.

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/device-config/740/management-center-device-config-74/device-ops-cluster-sec-fw-3100.html

Re: FTD Clustering with Firepower 3140

hadeelOth81 — Thu, 11 Apr 2024 18:08:56 GMT

@Rob Ingram Thanks Rob for your reply. So it means no workaround to configure it from the Chassis manager!

Thank you,

Re: FTD Clustering with Firepower 3140

MHM Cisco World — Thu, 11 Apr 2024 18:10:59 GMT

https://www.cisco.com/c/en/us/support/docs/security/secure-firewall-threat-defense/221012-configure-ftd-high-availability-using-fd.html

You can use I think FDM check link

MHM

Re: FTD Clustering with Firepower 3140

Rob Ingram — Thu, 11 Apr 2024 18:11:21 GMT

@hadeelOth81 no you don't configure it from the chassis manager, clustering and other such functionality is configured from the FMC.

Re: FTD Clustering with Firepower 3140

Rob Ingram — Thu, 11 Apr 2024 18:13:13 GMT

@MHM Cisco World wrote:

https://www.cisco.com/c/en/us/support/docs/security/secure-firewall-threat-defense/221012-configure-ftd-high-availability-using-fd.html

You can use I think FDM check link

MHM

@MHM Cisco World clustering is not High Availability and FDM does not support clustering, only HA.

Re: FTD Clustering with Firepower 3140

hadeelOth81 — Thu, 11 Apr 2024 18:16:18 GMT

If that is the case can a we migrate a cluster from one FMC to another one?

Thank you all!

Re: FTD Clustering with Firepower 3140

Rob Ingram — Thu, 11 Apr 2024 18:18:58 GMT

@hadeelOth81 register the FTD's on the other FMC and create the cluster.

Re: FTD Clustering with Firepower 3140

MHM Cisco World — Thu, 11 Apr 2024 18:21:22 GMT

Why yoh don't run two cluster (not ha) in one fmc?

MHM

Re: FTD Clustering with Firepower 3140

Marvin Rhoads — Fri, 12 Apr 2024 14:00:27 GMT

As @Rob Ingram correctly noted in his first reply to this thread, 3100 series clusters are managed differently from 4100 and 9300 series in that you onboard the chassis into FMC and then add FTD instances (and clustering) as desired. The older series used the separate chassis manager to create instances which were then in turn managed with FMC.

Re: FTD Clustering with Firepower 3140

hadeelOth81 — Fri, 12 Apr 2024 14:09:54 GMT

Much appreciated, Marvin.

Re: FTD Clustering with Firepower 3140

MHM Cisco World — Fri, 12 Apr 2024 14:15:00 GMT

Friend you need to run cluster or HA ?

MHM

Re: FTD Clustering with Firepower 3140

hadeelOth81 — Fri, 12 Apr 2024 14:17:25 GMT

I need to run a cluster.

Thank you,

Hadeel