Migration from FP4110 to FP2140

[cisco11288702]

Hello,

We are upgrading to FP2140 from FP4110 and i have to copy all rules and VPN profiles to the new FP

My question is there any migration tool can assist in this or any other means to achieve this .

thanks

Al

[Marvin Rhoads]

There's no migration tool for this use case.

ACP rules are easy - as long as you have the same zones setup on the new device just change or add the target device in FMC to include the new appliance. Similarly with remote access VPN - although you will have to do any certificate installation separately. Likewise for NAT policy.

The device settings (interfaces, routing etc.) will have to be recreated manually.

[cisco11288702]

Do you instruction for adding new device to FMC and how to copy config and  then remove the old one.

[Marvin Rhoads · Accepted solution]

Adding devices is the standard way described here:

https://www.cisco.com/c/en/us/td/docs/security/firepower/670/configuration/guide/fpmc-config-guide-v67/device_management_basics.html#ID-2242-0000069d

Copying the configuration bits not handled in the ACP/NAT/VPN configs I already mentioned is done manually. Just edit the device after it has been added and change it to match what the old one had.