topic ASA to FTD migration in Network Security

ASA to FTD migration

rushispace — Wed, 03 Jul 2024 19:44:56 GMT

hey there i am trying to migrate my old ASA Cluster firewall to a new FTD via FMC using FTM tool so i tried a demo for the same with same configuration on FTM however FTM gives me error for interface

there is total 113 Logical Interfaces like 'interface Port-channel10.197' this

error:

Blocked

FTD 3110 has only 16 physical interfaces available but the source configuration has 84 interfaces. Please choose a different FTD device to proceed.

Re: ASA to FTD migration

MHM Cisco World — Wed, 03 Jul 2024 20:04:01 GMT

https://www.cisco.com/c/en/us/td/docs/security/firepower/migration-tool/migration-guide/ASA2FTD-with-FP-Migration-Tool.html

this migration tool

MHM

Re: ASA to FTD migration

rushispace — Wed, 03 Jul 2024 20:14:01 GMT

so as per the documentation we need to create interface, port-channel manually right ?

During migration, the Secure Firewall migration tool resets the interface configuration. If you use these interfaces in policies, the Secure Firewall migration tool cannot reset them and hence the migration fails.
The Secure Firewall migration tool can create subinterfaces on the native instance of the threat defense device based on the ASA configuration. Manually create interfaces and port channel interfaces on the target threat defense device before starting migration. For example, if your ASA configuration is assigned with the following interfaces and port channels, you must create them on the target threat defense device before the migration:
- Five physical interfaces
- Five port channels
- Two management-only interfaces

Re: ASA to FTD migration

rushispace — Wed, 06 Nov 2024 06:22:56 GMT

Thanks every one !! actually we need to create a basic port-channel interface eg. po-ch10 and then migration tool will create sub interface on the bases of vlan taging