We are attempting to migrate two FTDs managed on FDM to FMC.
The new FMT version provides the option to migrate from FDM to FMC; however, due to a bug in the code the tool crashes at the last step. We opened a ticket with Cisco TAC and we are still waiting for the development team to publish a version with a fix.
We migrated most of the config using APIs:
1) Extract information needed from FDM using API and place them in JSON file
2) Modify JSON file format to become compatible with body of the POST request to FMC
3) Post the data using APIs to FMC
4) When available, we convert the json file to CSV and import the CSV to FMC
This method worked for most objects, however when working with access rules it became a lot harder due to the complex structure of the ACL on both appliances and the big difference between them.
We have over 100 rules on FDM and moving them manually will take a lot of time.
Does anyone have a script that might automate the process, or a method to alter the structure of the access rules extracted from FDM to become compatible with FMC?
Any advice would be highly appreciated.
Solved! Go to Solution.
FMC API documentation: https://(fmc_ip)/api/api-explorer
@Georges Francis Even we are planning to migrate FDM managed FTD to FMC.
I have a few questions for you
1. Which version of FMC supports this migration.
2. Did you manage to extract all Objects,Policies,Ports from FTD using API & then Push the same to FMC ? Is so you can you please suggest on how you did it?
As per FMT documentation you should have the following:
You can check the documentation and all requirements of the FMT on right pane on the screen in the FMT tool after selecting FDM from the drop down list on the left.
That would be regarding the version in order for FMT to work.
@00uv4hyt1ZlDrrQyK5d6 regarding the APIs, yes I was able to do all of that. You need to check the API Explorer in both the FDM and FMC, it will show you all possible APIs that can be used on the device. Everything is well documented and easy to understand with examples.
You can also find a lot of youtube videos from Cisco DevOps showing how to use APIs for various tasks.
The challenging part would be modifying the format of the output from the first device to become compatible with the second.
I had to be creative converting json to excel or using notepad++ to modify data in bulk in the json file.