topic Re: Juniper SRX 5800 to PA-7050 migration in Expedition Discussions

Juniper SRX 5800 to PA-7050 migration

DustinBranham — Fri, 16 Dec 2022 16:42:48 GMT

Trying to migrate SRX 5800 ver 20.4R3-S3.4 cluster using Expedition. I have done quite a few SRX migrations but this one doesn't show any of the global routing instance information. Because of this there are tons of BGP and OSPF configuration that wont show up. Does anyone have any experience with this issue? Is there another way to bring the BGP and OSPF config from the SRX 5800 into Expedition. If not I will have to manually build it on the Palo.

Re: Juniper SRX 5800 to PA-7050 migration

lychiang — Fri, 16 Dec 2022 17:53:07 GMT

@DustinBranham Only static routes are supported by Expedition , Dynamic routing configuration are not supported, those will need to be rebuild in Palo Alto Networks Firewall.

Re: Juniper SRX 5800 to PA-7050 migration

Arne-VDH — Sat, 07 Jan 2023 13:49:42 GMT

Export your BGP routes to a text file and append them as static routes to your config file manually, this'll allow expedition to read them in and works easier on your NAT/Security policies regarding their zones.