topic Moving interface configuration and sub interfaces to another interface on same firewall in General Topics

Moving interface configuration and sub interfaces to another interface on same firewall

PaloNetworkMonkey — Fri, 16 May 2025 09:49:26 GMT

Hi,

I want to move all interface from a 1gb port (1/2) to a 10gb port (1/8) what is the quickest way to do this. Is there a bulk move or clone interface option within the GUI?

Model PA-5220

Software Version 10.1.14-h10

Not using Panorama. Have just tested but unable to configure the new 10gb interface as it uses the same IP details as the 1gb.. which will not be moved until OOHs migration window..

Thanks

Re: Moving interface configuration and sub interfaces to another interface on same firewall

mshekh — Fri, 16 May 2025 14:49:34 GMT

Hi @PaloNetworkMonkey ,

Thanks for info, You can't configure the same IP on other interface if you are using existing interface. So suggestion is to plan the configuration changes during the migration activity.

Re: Moving interface configuration and sub interfaces to another interface on same firewall

TomYoung — Fri, 16 May 2025 15:10:14 GMT

Hi @PaloNetworkMonkey ,

The quickest way to move the interface is to export the configuration, search and replace, and import the configuration/load/commit. The interface can be associated with multiple services and removing/re-configuring those services in the GUI can take a while.

Thanks,

Tom

Re: Moving interface configuration and sub interfaces to another interface on same firewall

Brandon_Wertz — Fri, 16 May 2025 16:00:23 GMT

@PaloNetworkMonkey wrote:

Hi,

I want to move all interface from a 1gb port (1/2) to a 10gb port (1/8) what is the quickest way to do this. Is there a bulk move or clone interface option within the GUI?

Model PA-5220

Software Version 10.1.14-h10

Not using Panorama. Have just tested but unable to configure the new 10gb interface as it uses the same IP details as the 1gb.. which will not be moved until OOHs migration window..

Thanks

@PaloNetworkMonkey I would do it exactly as @TomYoung described. Export your config via XML. Adjust the interface settings moving them away from 1/2 and applying them to 1/8. Just make sure you capture all configuration points. Then import the config. It should be an almost seamless transition and should be less than a 10 second (random time I can think of in a worse case situation) outage while things come up on the new interface.

You can have the new interface all cabled up ahead of time. This definitely should be done in a maintenance window though and you should be ready to troubleshoot if something doesn't go as planned.