I want to change FTD and FMC IP

[Hesam Teymouri]

Hi

I have a 2 ASA 5555X and firepower module run on this ASA, and manage through FMC.

I want to change the IP modules and FMC, but I realized it's a risk.

Please give me the best solution to change the IP.

[Marvin Rhoads]

It's easy to change the managed device IP. The FMC is hard to do while keeping the relationship with the devices. If there is not much configured on them (there often is not with firepower service modules since interface, NAT, routing etc are all done in the ASA and the service module), it may be easier to just delete / de-register the devices and re-add them (with their new addresses) once you have updated the FMC address locally on the FMC.

[Hesam Teymouri]

Hi Marvin

Should I change the FMC IP first, then change the modules IP ? 

[Marvin Rhoads]

You can change the device addresses by changing it on both the module ("configure network..." command) and on FMC (Edit device after first disabling management slider control). You should do the FMC side first, then the device and finally re-enable the management slider control.

Changing the FMC IP address will require de- and re-registration of the devices (configure manager delete / add on the device side plus add device on the FMC side). That will be a disruptive change as all device configuration will be re-added from FMC when adding the devices anew.