FTD VPN MIGRATIONS

fmugambi — Mon, 13 Oct 2025 07:34:53 GMT

Hello Team,
I have fmc managind two physical ftd 2130 on my primary DC.

I have two more 2130 ftds on my DR to be managed by the same fmc.
Am looking to copy/push configs from ftds in primary to secondary, especially the ipsec vpn tunnels. Is there a way to do this, with having to do it manually?
Tried device push configurations, but keep getting 'source & destination devices do not have interfaces with similar supported speeds'.
This is confusing to me as both devices are of the same model.

Thanks in advance.

Re: FTD VPN MIGRATIONS

Marvin Rhoads — Mon, 13 Oct 2025 13:15:38 GMT

Site-to-site VPNs must be configured manually on different devices - there's no easy way to make a copy of a remote device (that's not part of an HA pair with an existing FTD). You can easily copy Access Control, NAT policies etc. by just adding the DR data center devices as targets of those policies (assuming you've manually setup the device interfaces, routing etc.)

topic FTD VPN MIGRATIONS in Network Security

FTD VPN MIGRATIONS

Re: FTD VPN MIGRATIONS