FTD Replacement Question

[benolyndav]

Hi

So FTD 2120 managed by FMC has failed I have a spare 2130 can I use this as a replacement I have  backups of 2120 s this doable and how please.??

Thanks

[Rob Ingram]

@benolyndav de-register the failed FTD from the FMC. Setup the basic mgmt interface configuration on the replacement FTD, register to the FMC, configure and apply the policies that were previously applied to the failed device, deploy policy to the FTD.

[benolyndav]

Hi Rob

de-register the failed FTD from the FMC. Setup the basic mgmt interface configuration on the replacement FTD, register to the FMC, ok no worries

When you say configure what do you mean please.?

configure and apply the policies that were previously applied to the failed device, deploy policy to the FTD.

[Rob Ingram]

Hi @benolyndav I was referring to configuring data interfaces and routing at a minimum, then you just assign the already configured policies (ACP/NAT etc) and deploy. Although if you re-register using the same name/mgmt IP address it usually associates to the previous object - so would already have the configuration information.

[benolyndav]

Hi Rob

Thanks for that,  so no issues with the replacement being a different model ?

Thanks

[Rob Ingram · Accepted solution]

@benolyndav I don't see why not, you aren't doing a backup/restore - you are applying the pre-existing policies and applying them to a different FTD.

[balaji.bandi]

Is this HA ? or a standalone appliance?

Take the FMC backup, do not make any changes.

if this is standalone :

1. make sure the code was running on the old one, make the same version of code on 2130 - so configuration can be pushed easily

2. configure the basic config as your OLD one (networking configuration), register with FMC

3. once FTD is registered with FMC. you can push the configuration from FMC. (the old configuration).

4. connect rest of the Physical connections to Live network and test it.

Hope that helps you to start with.