Manual editing an existing PA5000 config for PA7000 migration

TRisec — Wed, 11 Jun 2014 09:35:34 GMT

Hi guys,

a customer gets a replacment of PA7050 for the PA5000 model they are currently using. Since the PA7k uses the blade slot as reference for the Interfaces my idea was to replace "ethernet1/1" from the PA5k config with "ethernet7/1" and load it up in the PA7k. Well, it didn't work as the Mgmt tells me that the reference is invalid.

A small extract from the error message is:

network -> interface -> ethernet -> ethernet7/11 ethernet7/11 is invalid. Discarding

zone -> internet -> network -> layer3 'ethernet7/11' is not a valid reference

If I instead configure a new interface and view the xml file, the interface is indeed named ethernet7/1 as the GUI tells me, so I'm quite confused what the problem is. Hopefully someone has an idea what to do as recreating the whole config from scratch would be nigh to impossible due to lots of VPN Tunnels.

Best regards

David

Re: Manual editing an existing PA5000 config for PA7000 migration

TRisec — Wed, 11 Jun 2014 11:13:30 GMT

fixed it. if you have a HA1 backup via mgmt port enabled, you have to delete this entry as it doesn't work with the pa7050 and will invalidate the whole config if it isn't removed.

topic Re: Manual editing an existing PA5000 config for PA7000 migration in General Topics

Manual editing an existing PA5000 config for PA7000 migration

Re: Manual editing an existing PA5000 config for PA7000 migration