05-27-2018 08:28 AM - edited 02-21-2020 07:49 AM
Hi all,
I am not sure if this has been discussed or not. I am looking for recommendations on how to move some new Firepower service modules, which run on various ASA 5500-X's and performing only monitoring, from their currently registered virtual FMC to a new physical FMC. None of these ASA's is running FTD yet. My biggest concern is the classic licenses of those managed devices.
Is it going to be a simple two steps: 1) "delete device" from current vFMC; and 2) "register device" with the new FMC? I suppose there is no additional work to be done using the classic license portal.
Thanks for your help in advance!!
Solved! Go to Solution.
05-27-2018 11:12 PM
Hi
Yes, the steps are correct.
Licenses would need be re-issued using the license key of new FMC where the devices would be registered.
You can do the license step before or after registration on new FMC. I would suggest to do it before so the new FMC already has licenses (classic) once modules are registered to it.
To bind the licenses again with the new license key/ FMC, either an email can be sent to licensing@cisco.com or you can issue licenses yourself at https://www.cisco.com/go/license but you would need your PAK no. for the licenses of modules along with the license key from new FMC.
Hope it helps,
Yogesh
05-27-2018 11:12 PM
Hi
Yes, the steps are correct.
Licenses would need be re-issued using the license key of new FMC where the devices would be registered.
You can do the license step before or after registration on new FMC. I would suggest to do it before so the new FMC already has licenses (classic) once modules are registered to it.
To bind the licenses again with the new license key/ FMC, either an email can be sent to licensing@cisco.com or you can issue licenses yourself at https://www.cisco.com/go/license but you would need your PAK no. for the licenses of modules along with the license key from new FMC.
Hope it helps,
Yogesh
05-30-2018 07:01 AM
06-12-2018 03:52 AM
Just to share my experience and one note with you, about moving the classic licenses from one FMC to another.
It is very important, at least for us, to keep track of the actual associations of PAK's and managed devices. i.e. which managed device has which PAK's. Several reasons but main one is, we have managed devices around the world and those managed devices were purchased at different time, and with different duration of AMP and/or URL subscriptions. When it comes to re-host a license, it is very important to be able to pick the right license (which was generated using a specific PAK), for the managed device that is being moved. Reason is, not all devices are the same model and having the same features, and service subscriptions, and we could not move all at the same time. :)
Hope these notes could help someone else who is in the same situation.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide