How to migrate FTD with VPNs?

[hoffa2000]

Greetings

I have an vFTD running 6.4.0.4 managed by an FMC running the same version. Now I need to migrate this FTD to another FMC. Exporting and importing the policies are quite straight forward but what about the VPNs. We have quite a few and I would like to keep downtime to a minimum. Is this even possible?

Regards

Fredrik

[Marvin Rhoads]

Is the other FMC new or pre-existing? If it's new you could migrate the FMC by backup and restore.

If it's pre-existing I don't think there's any easy way to do this (as of the current 6.5).

[hoffa2000]

Hi

It's an existing FMC so yeah, I guess I'm stuck with manual migration.

Regards

/Fredrik

[Marvin Rhoads]

Not a trivial task I know. It would be good to send the feedback to your Cisco rep if you have one.

You can at least get the PSKs from the cli.

Go into LINA (system support diagnostic-cli) and grab "more:system:running-config".