topic Re: Palo Alto Expedition 1.2.46 move virtual router to different vsys in Expedition Discussions

Palo Alto Expedition 1.2.46 move virtual router to different vsys

dvanselst — Mon, 12 Dec 2022 14:15:11 GMT

How can you move a virtual router to a different vsys?

I imported the config of my Panorama with 3 different vsys.

Now I import the config of my Juniper SRX firewall and want to assign my virtual router to vsys3, there is no button to change it to vsys3?

It puts it default in vsys1, I can also not change it by the export tab because in the network there are no vsys? Only in the device group I see the different vsys from Panorama.

Please help.

Re: Palo Alto Expedition 1.2.46 move virtual router to different vsys

lychiang — Mon, 12 Dec 2022 18:55:39 GMT

Hi @dvanselst If you are merging with panorama base config , you can create a new template for this juniper migration, and drag and drop the network section from left to right and drop it on to "network" folder of the template as shown in the below screenshot. Once the merged config is loaded in the panorama , you can then change the vsys in the template.

Re: Palo Alto Expedition 1.2.46 move virtual router to different vsys

dvanselst — Tue, 13 Dec 2022 08:18:41 GMT

Hi @lychiang, so if I understand correctly you can't change the vsys in Expedition and has to be done from Panorama?

So I have to migrate everything to vsys1 in Expedition, import the config in Panorama, import the config back in Expedition and then change the vsys in the template?

Thanks for your reply!

Re: Palo Alto Expedition 1.2.46 move virtual router to different vsys

lychiang — Tue, 13 Dec 2022 16:46:15 GMT

Hi @dvanselst , yes, don't change vsys name in expedition , please change it at panorama template .

Re: Palo Alto Expedition 1.2.46 move virtual router to different vsys

dvanselst — Wed, 14 Dec 2022 08:04:44 GMT

Hi @lychiang,

I found a way to change it in Expedition.

After you have merged the config, select Device -> Virtual systems open the PAN_0000xxxxxxxx.xml and there you can add the virtual systems and interfaces to the correct vsys!