topic FTD 2130 upgrade issues in Network Security

FTD 2130 upgrade issues

ugochunw123 — Fri, 21 Feb 2020 17:38:46 GMT

Hello,

Does someone know why upgrading a peer of FTD's disrupts service, since the peer is upgraded one at a time.

Re: FTD 2130 upgrade issues

Francesco Molino — Thu, 31 Oct 2019 01:49:58 GMT

Hi

You shouldn't get any disruption during upgrade.
From what version to which one?
You can check on /var/log/messages if you see something that went wrong during the upgrade.

Re: FTD 2130 upgrade issues

Marvin Rhoads — Thu, 31 Oct 2019 04:22:28 GMT

What sort of service disruption did you observe?

@Francesco Molino is correct - an upgrade of an HA pair of FTD 2130 appliances (assuming your initiated it from FMC) should not cause service disruption. This is confirmed in the 6.5 release notes as follows:

High Availability Pairs: Firepower Software Upgrade

You should not experience interruptions in traffic flow or inspection while upgrading the Firepower software on devices in high availability pairs. To ensure continuity of operations, they upgrade one at a time. Devices operate in maintenance mode while they upgrade.

The standby device upgrades first. The devices switch roles, then the new standby upgrades. When the upgrade completes, the devices' roles remain switched. If you want to preserve the active/standby roles, manually switch the roles before you upgrade. That way, the upgrade process switches them back.

https://www.cisco.com/c/en/us/td/docs/security/firepower/650/relnotes/firepower-release-notes-650/upgrade.html

Re: FTD 2130 upgrade issues

ugochunw123 — Thu, 31 Oct 2019 14:33:11 GMT

From version 6.2.3.10 to version 6.4.0

Re: FTD 2130 upgrade issues

Francesco Molino — Sun, 03 Nov 2019 02:24:26 GMT

I did several upgrades these days to 6.4 but from 6.3.
Check out if there are some bugs known related to your version, otherwise if you have another shot at this, open a tac case.
Did you looked at the log file?