cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
945
Views
0
Helpful
1
Replies

Moving FPR4120 cluster from FMC1000 to FMC2500

solar00
Level 1
Level 1

Hello

 

We currently have a FPR4120 cluster which is managed by FMC1000 (HA setup), we also have new FMC2500 (also HA).
The FMC2500 is managing approximately 70 FPR2130 devices and we need to move the FPR4120 to this new FMC as well, eventually the FMC1000 wil be turned off. So a regular backup/restore procedure is not an option.

How can I move the FPR4120 cluster without breaking the cluster and with minimum or no downtime? Nothing will change and all interfaces stay the same only the connection to the management center will change.
I assume I can export the Firewall policy from the FMC1000 and import it into the FMC2500 after upgrading the FMC1000 to make the software release identical.
But I have no idea what will happen when I deregister the cluster from the FMC1000. And if I can just add it to the new FMC and push the imported policy. I have built the FMC2500 myself but I didn't build the FMC1000 and the FPR4120 cluster.

Please help

1 Reply 1

Abheesh Kumar
VIP Alumni
VIP Alumni

Hi,

First of all Maintenance window is required for this activity.

You need to break the cluster from current FMC 1000 and add to FMC 2500 then create cluster by specifying the Master/Slave device. After that specify the new management IP on the FXOS of both 4100. Then add it to the FMC 2500 and create the interface and routing configuration as same as in the FMC 1000. You need to create new policy for 4100, as i doubt you cannot  import the existing configurations from FMC 1000 to FMC2500.

 

Hope This Helps,

Abheesh

Review Cisco Networking for a $25 gift card