switching a Firepower 1120 failover active/standby into multi context

[haprinz]

Hi all,

Customer has two 1120's running in single mode and in active/standby failover configuration

now i would need to put them into multi context mode

i tried first to put the active into multi context mode (via console)
it starts as expected:

pri/act/asa1(config)# mode multi
WARNING: This command will change the behavior of the device
WARNING: This command will initiate a Reboot
Proceed with change mode? [confirm]
Convert the system configuration? [confirm]
!!!!
The old running configuration file will be written to flash

Converting the configuration - this may take several minutes for a large configuration

here it stopped  (for at least an hour)
no more answer of it even through console

but still reachable and 'working' via ip
so, i did a reload

it came back in multi context mode, but no configuration was taken over into admin context
i was expecting the former config to be present in admin context, as i have had it already multiple times, but never in a failover setup

and sure enough it still recognizes to failover mate, but doing nothing, since it got told, the mate is not (yet) switched into multi context mode.

Since there was no config taken over into some admin context, i switched back to single mode
and it came back as before.... (sure, i had to start failover process again, but this went smooth)

So, what would be the correct procedure to put this into multi context mode

Thanks

[MHM Cisco World]

This FPR is run ftd or asa image?

Only asa image can config multi context 

[haprinz]

ASA only image...., yes
and see above, it's an available command
and: we already have some of those boxes already switched over,
but it wasn't me doing this, and i don't know, if it was done before putting up failover...

[johnlloyd_13 · Accepted solution]

hi,

try to 'break' failover/HA first using 'no failover' in both primary and secondary.

then configure 'mode multiple' in primary.

you'll need to clear all config first in secondary to avoid config sync issue, then configure 'mode multiple' and re-configure 'failover lan unit secondary'.

[haprinz]

thanks i'll try that now....