Cisco Cisco Email Security Appliance X1070 Troubleshooting Guide

Contributed by Kevin Luu and Robert Sherwin, Cisco TAC Engineers.
Jul 03, 2014

Introduction
Replace an ESA that is in a Cluster
     Upload the Configuration File
     Add the New Machine to the Existing Cluster

This document describes the process used to replace a Cisco Email Security Appliance (ESA) that is in a
cluster.

There are two methods to replace an ESA that is in a cluster.

Upload the configuration file from the old machine to the new machine and then add it back to the cluster.

Log in to the old ESA. Type clusterconfig > removemachine in order to pull the machine completely
out of the existing cluster. The administrative disconnect might not suffice and might require a
removemachine command.

1. 

Once the old machine is removed from the cluster, follow either of these steps:

From the GUI interface, go to System Administration >Configuration File, save the
configuration file to your local desktop, and uncheck the mask password box.

♦ 

Or email yourself the configuration file with the passwords unmasked.

Warning: If you do not unmask the password, the system will not allow you to import the
configuration file into the new appliance.

♦ 

2. 

Proceed with the system setup wizard and bring the new appliance up with the basic configuration
setup.

3. 

Bring the new system online and upgrade to the same AsyncOS version as the existing machine in the
cluster. In order to see the version of the existing machine, type version from the command line.

Warning: Before a machine can be joined to an existing cluster, it must be on the same AsyncOS

4.