09-08-2016 05:27 AM - edited 03-12-2019 01:15 AM
Hi,
(apologize for my broken English)
i have 2 ASA5585X with SSP-CX in failover active/stanby with 2 contexts.
I want to migrate SSP-CX to SSP-SFR (firepower) without disruption.
I change the card in the standby firewall and at the reboot , i have this message :
Detected an Active mate
Mate ASA5585-SSP-CXSC-A card in slot 1 is different from mine ASA5585-SSP-SFR10
fw-asax-tdb/pri/stbyNoFailover>
My question :
is-it possible to migrate without disruption ?
Any ideas are welcome ...
Best regards
Pascal
09-08-2016 11:17 AM
In this case you will always have the non-matching hardware disable failover once it is installed.
I would say an outage is required and have management approve it as such.
09-09-2016 07:40 AM
Hi Marvin,
thanks for your answer.
I would like minimize the outage . I found a procedure in this post. Is-it correct ?
https://supportforums.cisco.com/discussion/12716956/how-upgrade-adding-ssp-sfr-module-cisco-asa-5585-x-without-downtime#comment-10969861
Best regards
Pascal
09-09-2016 07:43 AM
Pascal,
Yes - the advice that Ashkay gave in that post is correct. Adding or changing the SSP requires a power cycle of the chassis. You can minimize the outage but not avoid it altogether.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: