cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1653
Views
5
Helpful
2
Replies

Replace FWSM with Firepower Appliance

Scott_22
Level 1
Level 1

After migrating the configuration from the FWSM module to an FTD appliance, is there a specific process that needs to be followed so the traffic no longer flows to the FWSM? Is there a shutdown command, or do I simply shutdown each interface? 

1 Accepted Solution

Accepted Solutions

Marvin Rhoads
Hall of Fame
Hall of Fame

You can and should shut down the module.

hw-module module <module number> shutdown

Typically the FWSM had an association with the IOS-defined VLANs and was also the gateway for one or more subnets.

Assuming you have shutdown the L3 interfaces on the FWSM because you have moved them to FTD, you should still remove the VLAN associations in the IOS configuration.

no firewall module <module number> vlan-group <group number>
no firewall vlan-group <group number> <included VLANs>

View solution in original post

2 Replies 2

Marvin Rhoads
Hall of Fame
Hall of Fame

You can and should shut down the module.

hw-module module <module number> shutdown

Typically the FWSM had an association with the IOS-defined VLANs and was also the gateway for one or more subnets.

Assuming you have shutdown the L3 interfaces on the FWSM because you have moved them to FTD, you should still remove the VLAN associations in the IOS configuration.

no firewall module <module number> vlan-group <group number>
no firewall vlan-group <group number> <included VLANs>

Exactly what I was looking for. Thank you!

Review Cisco Networking products for a $25 gift card