Cisco Firepower Management Center High availability & device management

[M.Jallad]

Dears,

I'm trying to import two sensors to Firepower management center (ver. 6.1) configured as high available pair.  As i understood ; we have to import every sensor on each FMC node (primary and secondary). However, when trying to do this it fails to import the same sensor on both FMC nodes.

Appreciate to provide you input if anybody tested the same scenario. 

Steps done to import sensors :

1. Login to sensor 1.

2. Add manager one (FMC primary unit) with key.

3. Add manager two (FMC secondary unit) with key.

4. Login to FMC primary unit.

5. Import the sensor 1.

6.  Login to FMC secondary unit.

7. Tried to import sensor 1 , but if fails.

8. Same done for sensor 2 (step1 ~ 7).

Thanks,

Muayad Jallad,

[Rahul Govindan · Accepted solution]

From the Firepower 6.1 doc:

Devices registered to the active Firepower Management Center are automatically registered to the standby Firepower Management Center. Devices registered to the standby Firepower Management Center must be removed before establishing high availability.

Reference:

http://www.cisco.com/c/en/us/td/docs/security/firepower/610/configuration/guide/fpmc-config-guide-v61/firepower_management_center_high_availability.html#id_21197

So if they are already part of HA, you would have to register the sensor only once to the Active FMC unit.