topic Re: The best way/easiest way to migrate from 2 nos pair of PA 5250 & 5220 to a pair of PA 5450. in General Topics

The best way/easiest way to migrate from 2 nos pair of PA 5250 & 5220 to a pair of PA 5450.

souravpal — Tue, 14 Dec 2021 13:37:18 GMT

Current setup :

Multiple virtual instances running on a pair of 5250 and 5220 active-standby deployment each site.

Meaning 1 pair of 5250 + 1 pair of 5250 > 1 pair of 5450

Target setup :

All virtual instances would be migrated/consolidated to a pair of 5450 modular hardware active-standby deployment each site.

Note : Migration methodology should be less downtime involved and less complexity.

What would be easiest way to achieve the same also whether expedition tool can able to merge from two config to a single

Re: The best way/easiest way to migrate from 2 nos pair of PA 5250 & 5220 to a pair of PA 5450.

BPry — Tue, 14 Dec 2021 23:42:20 GMT

@souravpal,

Expedition can merge multiple configurations, and you can also merge it manually if you're comfortable working with XML (heck, you could even merge it directly on the firewall if you wanted to). If you aren't comfortable working with XML, expedition is going to be the most "user friendly" way of doing so easily.

As for the migration itself, once you have the configuration built out you'll just want to manually go through and verify that everything actually is how it should be. Personally, when doing this sort of migration I like to take the time to go through everything and verify that I'm not moving over unused objects or rulebase entries that don't actually need to exist anymore. Use it to do a bit of "housekeeping" if you will.

Re: The best way/easiest way to migrate from 2 nos pair of PA 5250 & 5220 to a pair of PA 5450.

souravpal — Wed, 15 Dec 2021 09:45:36 GMT

Thanks for quick response , manually merging would be huge time consuming also could be error prone as we have total 20 nos vsys configuration from diff set of HA setup , many common setting, named policy like LACP bonding , zone, etc. Does Expedition tell if there is duplicate/shadow/override configuration while merging two configuration.

Is there any ways to do inplace migration with less downtime where in one shot , we can do all instances migrated to new setup?

Also thinking about in parallel migration , apart from time constrain is there any other risk is involve while planning to do batch wise vsys movement.?