ASAX-5585 HA pair : migrate SSP-CX to SSP-SFR without disruption

[Pascal Martin]

Hi,

(apologize for my broken English)

i have 2 ASA5585X with SSP-CX in failover active/stanby with 2 contexts.

I want to migrate SSP-CX to SSP-SFR (firepower) without disruption.

I change the card in the standby firewall and at the reboot , i have this message :

Detected an Active mate
Mate ASA5585-SSP-CXSC-A card in slot 1 is different from mine ASA5585-SSP-SFR10

fw-asax-tdb/pri/stbyNoFailover>

My question :

is-it possible to migrate without disruption ?

Any ideas are welcome ...

Best regards

Pascal

[Marvin Rhoads]

In this case you will always have the non-matching hardware disable failover once it is installed.

I would say an outage is required and have management approve it as such.

[Pascal Martin]

Hi Marvin,

thanks for your answer.

I would like minimize the outage . I found a procedure in this post. Is-it correct ?

https://supportforums.cisco.com/discussion/12716956/how-upgrade-adding-ssp-sfr-module-cisco-asa-5585-x-without-downtime#comment-10969861

Best regards

Pascal

[Marvin Rhoads]

Pascal,

Yes - the advice that Ashkay gave in that post is correct. Adding or changing the SSP requires a power cycle of the chassis. You can minimize the outage but not avoid it altogether.