topic HA Upgrade in General Topics

HA Upgrade

jdprovine — Wed, 14 Oct 2015 20:04:16 GMT

I found this link on the knowledge base

https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Upgrade-a-High-Availability-HA-Pair/ta-p/57081

Has anyone used this method or any other method that they would like to share. I am currently at 6.1.1 and sounds like its not a good idea to jump all the way to 7.0 but to do it in increments. Can you do the passive side first see if it works and then the active side? Is it possbile to roll back easily?

Re: HA Upgrade

cfussl — Wed, 14 Oct 2015 21:48:53 GMT

I have used the method outlined in this document many times and it works fine. There is no need to download or install minor releases in between the major releases you want. You would just need to download 7.0.1 and then download and install 7.0.3.

Re: HA Upgrade

HULK — Thu, 15 Oct 2015 01:06:23 GMT

Just add to it, In case if you face any problem after the software upgrade. Need not to install the previous version again from GUI, you may follow below steps to easily revert the 6.1.x OS. For example: ( you have upgraded the PAN firewall from 6.1.5 to 7.0.1) =========== > debug swm status Partition State Version -------------------------------------------------------------------------------- sysroot0 REVERTABLE 6.1.5 >>>>>>>>> previously installed PAN OS sysroot1 RUNNING-ACTIVE 7.0.1 >>>>>>>>>>>>> currently install maint READY 7.0.1 admin@51-PA-5020> debug swm re > rebuild-content-db Rebuild content database > refresh revert back to last successfully installed content > revert revert back to last successfully installed software admin@51-PA-5020> debug swm revert >>>>>>>>>>>>>>>> apply this single command to revert the PAN OS back to 6.1.5 <<<<<<<< wait for 1 minute >>>>>> admin@51-PA-5020>>request restart system >>>>>>>>> restart the system. Upon reboot the device will come up withPAN OS 6.1.5. Thanks

Re: HA Upgrade

HULK — Thu, 15 Oct 2015 01:09:53 GMT

Just add to it,

In case if you face any problem after the software upgrade. Need not to install the previous version again from GUI, you may follow below steps to easily revert the 6.1.x OS.

For example: ( you have upgraded the PAN firewall from 6.1.5 to 7.0.1)

===========

> debug swm status

Partition State Version
--------------------------------------------------------------------------------
sysroot0 REVERTABLE 6.1.5
sysroot1 RUNNING-ACTIVE 7.0.1 >>>>>>>>>>>>> currently installed
maint READY 7.0.1

apply this single command to revert the PAN OS back to 6.1.5

> debug swm revert

<<<<<<<< wait for 1 minute >>>>>>

>request restart system >>>>>>>>> restart the system. Upon reboot the device will come up withPAN OS 6.1.5.

Thanks