Home Blog Firepower Management Center High Availability

Blog

Aug 25
Firepower Management Center High Availability
Posted by Pablo Mirsoian

Hello World,

I was able to work on a feature that was introduced in version 6.1. This feature is High Availability for FMC. The version of FirePower Management Center that this work was done on was 6.7. Also, a few caveats or things we need to know for this integration to be successful. Directly from Cisco.

FMC HA

*** We also assume that routing between these two management centers is correctly configured between FMC servers. Network Connectivity is required. ***

SRU and VDB are downloadable from Cisco.com. This is also directly from Cisco.com on what these SRU and VDB updates do.

FMC HAFMC HA

FMC HA

If they don’t match, you’ll need to update FMC implementations to the same version by uploading files.

FMC HA

FMC HA

Once everything matches you can start the integration and setup of HA.

On the Primary FMC we will navigate to System, Integration, and then High Availability. Select Primary enter the IP address of the secondary FMC and a registration key that will need to match on both servers. Select Register.

FMC HA

On the secondary FMC we will do the same, but instead of primary role we will select secondary and use the same registration key.

We should see status messages like this….

FMC HA

FMC HA

FMC HA

After all data has been transferred, success!

FMC HA

This should be your result after integration has been completed.

Technical References:

https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/system_software_updates.html

https://www.cisco.com/c/en/us/td/docs/security/firepower/610/configuration/guide/fpmc-config-guide-v61/firepower_management_center_high_availability.html

As always if you have any questions on getting FMC set up for you and your business and would like to schedule a free consultation with us, please reach out to us at sales@lookingpoint.com and we’ll be happy to help!

Contact Us

Written By:

Pablo Mirsoian, Network Engineer

subscribe to our blog

Get New Unique Posts