Solved: Can't Migrate RAVPN config from ASA to FTD

adamgerber · ‎02-10-2023

Hi

I am currently preparing a migration for a customer from ASA5585 to Firepower 4115 appliances.

I have migrated all config using migration tool (v3.0.2) to FMC (v7.2.2) and pushed to FTD's (v7.0.5).

On the migration tool, when I validate the ASA config it detects the RAVPN profiles but on the next page where I can select what configuration items I want to migrate RAVPN is greyed out. Anyone seen this and have any pointers? I really dont want to manually migrated hundreds of lines of vpn filter acl.

KR,

Adam

adamgerber · ‎02-10-2023

Hi Marvin - fix found: sh tech support file does not allow the migration of RAVPN. Had to use the sh run txt of the context and it worked.

View solution in original post

Marvin Rhoads · ‎02-10-2023

Do you have an AnyConnect/Secure Client file present in your FMC objects?

adamgerber · ‎02-10-2023

Hi Marvin - fix found: sh tech support file does not allow the migration of RAVPN. Had to use the sh run txt of the context and it worked.

Marvin Rhoads · ‎02-10-2023

That's good to know - thanks for the update. I've only ever migrated single context ASAs and then I try to do it via direct connect vs. config upload.