topic Re: PANORAMA CHANGE HARDWARE in General Topics

PANORAMA CHANGE HARDWARE

alle — Mon, 09 Mar 2015 14:18:00 GMT

Hello world,

I must change a cluster PA2050 by PA5020 (with the same configuration) and this PA are Managed by Panorama. ( all policies objects are created on Panorama but not policies)

Somebody know how to make this change? which steps?

thanks for your help

Regards

Re: PANORAMA CHANGE HARDWARE

mmmccorkle — Wed, 18 Mar 2015 21:32:08 GMT

Alle,

We should be able to take the same policy configured for what was in place (2050) and apply it to the new (5020) assuming that they will be running the same version. If you were going from the 5020 to the 2050, I'd say this would be a little more difficult.

Should be straight forward...

let me know if we can clarify anything more specific you run into.

Thanks!

Please do not forget to mark and 'Helpful' or 'Correct' replies.

Re: PANORAMA CHANGE HARDWARE

torm — Wed, 18 Mar 2015 22:08:27 GMT

As said above, should be pretty straight forward from 2050 to 5020, as they have the same number of ports.

If your object are pushed through Panorama, but you're policies are local, you will need to push the object from Panorama to the new device first. Panorama objects are not included in the config file when you do a backup locally on the device.

Then you should be able to just load a config backup from you old device on the new device.

- Tor

Re: PANORAMA CHANGE HARDWARE

pulukas — Thu, 19 Mar 2015 09:44:35 GMT

I would use the following steps:

Configure the basic management setup on the new PA
Add this to Panorama
Add the new PA to the same group and template as the current
Push the Panorama settings
Export the existing PA configuration
Save the new PA state for potential rollback
Import and apply the existing PA settings to the new PA
Edit the mgmt address and host names back to the new PA settings
commit the changes and confirm the configurations look good
Schedule a cable swing for the production interfaces from old to new PA

Re: PANORAMA CHANGE HARDWARE

alle — Wed, 29 Apr 2015 09:39:13 GMT

thks for your help

I follow this steps and all it's ok !

Re: PANORAMA CHANGE HARDWARE

pulukas — Wed, 29 Apr 2015 10:26:59 GMT

Glad to hear all went well. We like the uneventful cuts.