FTD Backup Cluster mode

[ashleybabajee]

Hello,

I have 2 FTD on HA and 2 FTDs on Cluster mode, on FMC i am not able to download configuration for FTDs on cluster mode.

Is there any way via GUI to perform that or can we just save a running config via cli ?

Device mode 4115 version 6.5 , FMC 6.5

Thanks

[Milos_Jovanovic · Accepted solution]

Hi @ashleybabajee,

Backup of FTD Cluster is not supported. You can find that information in the config guide.

Instead, you should backup FMC and FXOS. In case your device goes down, you would rebuilt it from FXOS backup, it would be bootstraped from there. You can follow this guide in order to replace broken Cluster unit. In case of the FMC, situation is clear.

BR,

Milos

[ashleybabajee]

Thanks @Milos_Jovanovic , make sense what you said.

In any case the FTD are sensor with only management IP locally configurable, and all configurations are done via FMC which is the controller. Removing and adding a new sensor should be easy by this design, so in which cases do we need the FTD backup for?

[Milos_Jovanovic · Accepted solution]

FTD backup is usefull with HA setup. When one device from HA goes down, in order to recover it, you would need to add new/blank/reimaged device to FMC, to recreate interfaces, to break current HA and to create new one, with remaining device as active one. Instead, you could just restore backup, which would contain necessary info for the system to come back in HA, without doing all of this manually.

Again, assuming you are running multi-instance, youw would need to follow the guide from here for FPR4100 chassis, and then from here, to restore instance itself.

BR,

Milos

[mumbai.support]

Hey Milos,

Thanks for the information. I have a query regarding the cluster backup for FTD. I understand that if one of the FTD cluster devices breaks due to any scenario, we can replace the broken FTD. However, my main question is: what if both FTD devices are down due to some scenario? How can we replace them without a control link?

[felipe.bsilva]

I have the same question!!!