topic Re: FMC Upgrade in HA in Network Security

FMC Upgrade in HA

fatalXerror — Fri, 21 Feb 2020 15:56:51 GMT

Hi guys,

I am planning to upgrade my FMC which is deployed in HA mode. Just thought because based on the process, I need to pause the sync of 2 FMC, do I need to upload the upgrade image to both FMC nodes or uploading in the Active FMC before pausing sync will do?

Thanks

Re: FMC Upgrade in HA

balaji.bandi — Wed, 04 Jul 2018 20:52:43 GMT

First what version of FMC you upgrading, check the upgrade path

and follow below guide and it worked exactly as mentioned to me

https://www.cisco.com/c/en/us/td/docs/security/firepower/upgrade/fpmc-upgrade-guide/upgrade_firepower_management_centers.html#id_54076

Re: FMC Upgrade in HA

fatalXerror — Thu, 05 Jul 2018 03:14:45 GMT

Hi balaji,

Yes I am following that document but it doesn't state if do I need also to upload the image to the secondary FMC. It doesn't also state that the image will also synchronize from primary to secondary FMC when you upload it in the primary.

I am upgrading from 6.1 to 6.2.3.

Thanks

Re: FMC Upgrade in HA

Ashork — Fri, 03 Aug 2018 18:11:48 GMT

1. Break the HA.

2. Upload the file to both primary and secondary FMC's.

3. Upgrade the secondary FMC.

4.Upgrade the primary

---deploy changes to all sensors

** make HA pair (verify both FMC version's should match)

5. Upload the images for sensors and push these to sensors.

6. select the secondary sensors(if they are in HA pair) and upgrade these first.

--deploy changes to listed sensors

7. verify the secondary sensors (check the version)

---deploy changes to all primary.

8. if everything is good then upgrade the primary.

9. check the device health status(up or down).

Re: FMC Upgrade in HA

Ashork — Thu, 27 Sep 2018 20:50:49 GMT