connect new FTD for HA pair with a prodcutive FTD

[QW_netzwerk]

Hello,

is it possible to connect a new FTD to join as HA pair with a productive FTD? As far as I have seen for HA pair the both FTD should have no interface configuration before HA configuration.

regards

Saimun

[Rob Ingram]

Hi,

No you don't need to have both FTD's without configuration. When you create the HA pair, select the existing production FTD as the Active unit and the new FTD as the secondary. The existing configuration from the production FTD will be used for the HA configuration.

HTH

[gilbert.aispuro1]

I can attest to what Rob says. I had a single FP 2110 with a full config that was in production for two months before adding another for HA. I had no issue what so ever. 

[balaji.bandi]

Required basic configuration done on the new FTD before joining to HA (physical connection to be ready)

Good document :

https://docs.defenseorchestrator.com/Configuration_Guides/Firepower_Threat_Defense_High_Availability/0010_Firepower_Threat_Defense_High_Availability_Pair_Requirements

[Ruben Cocheno · Accepted solution]

@QW_netzwerk 

You just need to run the wizard on the FMC saying the you adding an HA pair, and you need to select which is the primary and secondary nodes. The secondary node only need to have the managed interface up and reachable from the FMC. After you select both nodes, FMC will convert the two firewalls in a HA pair.

Expect some service disruption while you doing this.