topic Re: Needing all help possible to upgrade our lab from PA-500 to VM-100s in General Topics

Needing all help possible to upgrade our lab from PA-500 to VM-100s

jhauser — Tue, 12 Aug 2014 10:52:05 GMT

Good morning,

I am John Hauser, a trainer for Fishnet Security, and I have been tasked with upgrading our lab environment from our old PA-500 hardware units to the VM-100 FWs. I have very little VM experience both on the initial setup of the VM side and then also what modifications will have to be made to labs to make them work. I have heard many comments in some of the TTT sessions that I have attended stating that are many tricks to be learned along the way. If any one would be willing to help me get started with documentation, the lessons that you have learned, and so on, I would greatly appreciate it. I have the one document that Blair pointed me to, but need much. Has anyone tried to mix PA-500s and VM-100 together for a lab or are the labs so changed that it doesn't work. I am really green at this new VM stuff.

Thanks for any and all help offered,

John Hauser

john.hauser@fishnetsecurity.com

913-206-1255

Re: Needing all help possible to upgrade our lab from PA-500 to VM-100s

Hithead — Tue, 12 Aug 2014 12:13:36 GMT

Hi John,

please take a look :

https://live.paloaltonetworks.com/docs/DOC-6606

https://live.paloaltonetworks.com/docs/DOC-4159

https://live.paloaltonetworks.com/docs/DOC-4170

May these documents will help.

Re: Needing all help possible to upgrade our lab from PA-500 to VM-100s

pulukas — Thu, 14 Aug 2014 22:03:01 GMT

I think a lot depends on what you are using the lab for on how well this works as a mixed environment.

Building out lots of simple functions is great for a VM deploy. As long as you have enough vlans available to trunk into the VM host to provide the required separation for all the nodes.

The major drawback to the VM series is the feature parity. As long as you don't need to lab up the HA or other unsupported features all should work well.

Re: Needing all help possible to upgrade our lab from PA-500 to VM-100s

jhauser — Fri, 15 Aug 2014 17:57:43 GMT

Steven,

What functions beyond HA have you found the VM-100 don't work for the PA lab guide?

I am just getting started on both sides of this issue.

Thanks,

Re: Needing all help possible to upgrade our lab from PA-500 to VM-100s

pulukas — Sat, 16 Aug 2014 00:44:20 GMT

Other features I remember missing were Jumbo frames and LAGs. I haven't looked at the docs in a while, but at the time there was no single list of feature limitations. I had to cull them from the text in the deployment scenarios.

I don't do the courseware, but create labs for configuration testing. So I'm not sure how this would map to the classes.

Re: Needing all help possible to upgrade our lab from PA-500 to VM-100s

SDorsey — Mon, 18 Aug 2014 01:19:08 GMT

The VMs missing Jumbo Frames is ridiculously silly in my opinion.

I can understand HA and LAGs as one can us the hypervisor to facilitate that mostly.. but Jumbo Frames would be great to implement.

Re: Needing all help possible to upgrade our lab from PA-500 to VM-100s

pulukas — Mon, 18 Aug 2014 01:29:02 GMT

Agreed, the other silly decision on a VM is to not support v-motion. This is a pretty basic data center feature and makes getting a deployment approved by the VM team very difficult for production usage.