topic Re: Migration from a HA pair of 4800s to a HA pair of 6600s in Firewall and Security Management

Migration from a HA pair of 4800s to a HA pair of 6600s

Scott_76 — Fri, 19 Jun 2020 01:20:22 GMT

We are looking to migrate from a from an HA pair of 4800s to a HA pair of 6600s. Is it possible to migrate the existing config over, or does it need to be done manually? Is there a tool that can be used?

Re: Migration from a HA pair of 4800s to a HA pair of 6600s

Blason_R — Fri, 19 Jun 2020 05:00:27 GMT

I would pull up config from clish.

Format the 6600 with desired OS
Paste the relevant config like routes, interfaces [if not external modules are used; else the interfaces are going to be same], proxy arp, users, VRRP if any
Establish SIC
Install policy

And you should be done.

Re: Migration from a HA pair of 4800s to a HA pair of 6600s

Scott_76 — Tue, 23 Jun 2020 20:05:56 GMT

Would the old 4800s need to be upgraded to move the config, or no? Also, is there a command to pull pre shared keys for existing vpn tunnels?

Re: Migration from a HA pair of 4800s to a HA pair of 6600s

Blason_R — Wed, 24 Jun 2020 03:13:35 GMT

Nope you don't need to upgrade 4800 to pull the config. take out relevant config only as I said before interfaces, routes, Proxy arps, users, passwords, backup schedule, SNMP settings etc.

VPN pre shared key config is not in clish and its with Mgmt server; so once you establish SIC and install policy your tunnels should be up.

Again is VTI tunnels then pull up that config as well.