topic Re: FMCv Migration in Network Security

FMCv Migration

gcook0001 — Wed, 08 Jan 2025 18:02:02 GMT

I was wondering if this would work. I need to move our FMCv from its curent hypervisor to a new one. I was thinking the easiest way may be to create an new FMCv on the new hypervisor and make sure it matches the version of the current one. The new FMC can use temporarily use a trial license till the migration is complete. Create a cluster between the two installs and let the new one sync all the settings. Once that is done break the cluster and shut down the old FMC.

Re: FMCv Migration

Rob Ingram — Wed, 08 Jan 2025 18:15:33 GMT

@gcook0001 or backup and restore - https://www.cisco.com/c/en/us/td/docs/security/firepower/fmc_model_migration/b_FMC_Model_Migration_Guide/migrate_your_fmc.html that would be easier than creating an HA FMC pair.

Re: FMCv Migration

gcook0001 — Wed, 08 Jan 2025 18:17:29 GMT

Every time I try to do that I get a message about a mismatch. I forget the exact message but it has something to do that it doesn't like that the architecture is different.

Re: FMCv Migration

Rob Ingram — Wed, 08 Jan 2025 18:33:04 GMT

@gcook0001 ok, looks if you are migrating between different hypervisors you cannot use the backup and restore method. Refer to this post, with the workaround https://community.cisco.com/t5/network-security/can-fmc-running-in-vsphere-be-migrated-to-aws/td-p/4569305

Re: FMCv Migration

gcook0001 — Wed, 08 Jan 2025 18:38:00 GMT

Yeah I tried that too.