topic Re: Moving a VSYS from one PA device to another in General Topics

Moving a VSYS from one PA device to another

akhalighi — Sun, 21 Feb 2016 20:57:13 GMT

Hello

Question here , how can we move a VSYS from one device to another ? please note that in this scenario we cannot backup everything a restore on target since target is running other things that need to be running .

Any ideas ? what are important things ? shared objects ? ... etc . unfortunatly I did not fnd any guidelines.

Re: Moving a VSYS from one PA device to another

santonic — Mon, 22 Feb 2016 06:54:05 GMT

I would try with PA migration tool. Import configuration with source vsys, set the target configuration as base configuration and use the merge configuration feature. There you can simply drag parts of configuration you want to move from one configuration to other, really easy.

Re: Moving a VSYS from one PA device to another

FJU-ITCS — Mon, 22 Feb 2016 10:30:52 GMT

Over the CLI you can show the vsys configure:

configure -> show vsys vsys1

If you would copy and past, switch the output to "set"

normal mode -> set cli config-output-format set

Thereafter, the autocomplete does not work anymore

Re: Moving a VSYS from one PA device to another

akhalighi — Tue, 23 Feb 2016 14:31:19 GMT

Thanks for the help , I need to know what is important when merging a VSYS into a system that has other VSYS's running .
for example if the VSYS that I am moving has shared objects , has NATs and Routes bound to specific interfaces ( e.g. ethernet 0/1) and has a different VSYS ID .. how we merge it to the new host ..? do we need to massage the configuration ?

Re: Moving a VSYS from one PA device to another

akhalighi — Tue, 23 Feb 2016 14:32:29 GMT

Re: Moving a VSYS from one PA device to another

santonic — Tue, 23 Feb 2016 14:54:06 GMT

I'd say both ways will migrate all vsys configuration. But can't really confirm that.

Re: Moving a VSYS from one PA device to another

FJU-ITCS — Tue, 23 Feb 2016 17:09:42 GMT

show vsys vsys1 will only show the Config for the vsys!

If you have shared object, you must also make "show shared".

Re: Moving a VSYS from one PA device to another

Lucky — Tue, 23 Feb 2016 20:20:22 GMT

Hi,

another tip: in CLI for exports of configurations you can use "set cli pager off" to avoid parsing output through more.

Best regards

Luciano