Add more cluster nodes

Add or replace the Firewall Threat Defense cluster node in an existing cluster. When you add a new cluster node in FXOS, the Cloud-Delivered Firewall Management Center adds the node automatically.

Note

The FXOS steps in this procedure only apply to adding a new chassis ; if you are adding a new module to a Firepower 9300 where clustering is already enabled, the module will be added automatically.

Before you begin

  • In the case of a replacement, you must delete the old cluster node from the Cloud-Delivered Firewall Management Center . When you replace it with a new node, it is considered to be a new device on the Cloud-Delivered Firewall Management Center .

  • The interface configuration must be the same on the new chassis. You can export and import FXOS chassis configuration to make this process easier.

Procedure

What to do next

  1. To add another chassis to the cluster, repeat the procedure in Create a Firewall Threat Defense cluster except you must configure the following settings to be unique; otherwise, use the same configuration for both chassis.

    • Chassis ID

    • Management IP addresses

    Also be sure to set the startup version to the currently running version on the cluster nodes.

  2. In the Cloud-Delivered Firewall Management Center , choose Devices > Device Management , and select the Add > Device to add the new logical device.

  3. Choose Add > Cluster .

  4. Choose the current control unit from the drop-down list.

    When you choose a control unit that is already in a cluster, then the existing cluster name is auto-filled, and all eligible data units are added to the box, including the new unit you just added to the Cloud-Delivered Firewall Management Center .

  5. Click Add , and then Deploy . The cluster is updated to include the new member.