Cisco Firepower High Availbility

[a.aljiledi]

Hello...

I have one FTD 1150 registered to FMC on the production environment, and I have bought another FTD 1150 with the same license to be used on HA scenario...

so can I just add the new device to the FMC ?? or is there are some requirements to deploy both devices on HA...

Thanks

[Rob Ingram · Accepted solution]

@a.aljiledi 

Just add the new device to the FMC and then create an HA pair. You will need to ensure the devices are running the same hardware, software version, same number of interfaces. HA configurations require two Smart License entitlements; one for each device in the pair.

https://www.cisco.com/c/en/us/td/docs/security/firepower/660/configuration/guide/fpmc-config-guide-v66/high_availability_for_firepower_threat_defense.html#ID-2107-00000019

https://networksec-solutions.com/ftd-firepower-threat-defense-high-availability-ha-configuration-active-standby/

[a.aljiledi]

Thanks for replay...

there is any downtime for this process ???

[Marvin Rhoads]

Creating an HA pair will introduce brief traffic interruption and should be done during a planned maintenance window if there is production traffic being serviced.

[a.aljiledi]

Hello,

I have to configure the HA, but the second device statue is unknown and failed..

how can I define and troubleshoot the issue,

Thanks

[Marvin Rhoads]

Is the second device registered to FMC? Has it ever worked?