05-24-2023 01:05 PM
After we have uploaded the image to the FMC and pushed the image to the FTD HA pairs when we click the install the radio buttons of the HA group and both the devices buttons are grayed out so we can not select them to either readiness check or install. The customer wants to open the TAC case but I requested the reboot of the HA pairs.
Please give me your expert answers.
05-24-2023 11:04 PM
If the radio buttons for the HA group and devices are grayed out and you cannot select them for readiness check or installation in Cisco Firepower Management Center (FMC), there are a few possible reasons and solutions you can try:
Verify HA Configuration: Ensure that your HA configuration is correctly set up in the FMC. Check that both devices are added to the HA group and their HA status is active.
Verify Device Connectivity: Confirm that both devices are properly connected and reachable from the FMC. Ensure that network connectivity is established between the FMC and the FTD devices.
Check Device Licensing: Ensure that both FTD devices have valid licenses applied. In some cases, if the licenses are expired or not correctly installed, it can cause the devices to be grayed out in the FMC. Verify the licenses and reapply them if necessary.
Check Device Registration: Make sure that both FTD devices are registered with the FMC. If the devices are not registered or have connectivity issues with the FMC, they may appear grayed out. Check the registration status and resolve any registration issues.
Verify FMC and FTD Software Versions: Check that the software versions of the FMC and FTD devices are compatible. Incompatible software versions can cause issues with device management and gray out the radio buttons. Update the software versions if necessary to maintain compatibility.
Review Device Health: Ensure that both FTD devices are in a healthy state. Check the device health status and address any reported issues. If a device is experiencing problems, it may prevent you from selecting it for readiness check or installation.
If you have tried these steps and the radio buttons for the HA group and devices are still grayed out, it may be helpful to review the FMC logs for any relevant error messages.
M.
05-25-2023 03:59 AM
05-25-2023 04:46 AM
- I would give it a try but I can't guarantee success ,
M.
05-25-2023 06:32 AM
With FMC 7.0 and earlier you need to run the readiness check on the units in an HA pair individually. This is noted in the release notes:
Once you do that, you can proceed to upgrade as usual.
05-25-2023 07:28 AM
05-25-2023 08:07 AM
You should be able to run the readiness check in the GUI one each member unit separately.
If you cannot, you can upgrade via cli similar to how you did it with ASA. This blog post notes how to do so:
https://ciscoskills.net/2017/07/12/update-firepower-devices-manually/
However, that's not a recommended path. If it's not working from FMC then you are better off opening a TAC case to get that fixed since doing it in a non-supported manner may make a bad situation worse (and possibly leave you in a service-affecting outage).
05-25-2023 10:47 AM
05-25-2023 07:30 PM
Dear Marce
under Smart licensing, it shows "out of compliance."
Is it the reason for the issue of grey out.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide