topic Re: Upgrading 5050 to 5250 in Active/Passive Pair in General Topics

Upgrading 5050 to 5250 in Active/Passive Pair

Saadabdulmajeed — Fri, 22 Dec 2017 16:44:47 GMT

How can I upgrade 5050 to 5250 hardware in Active/Passive pair.

in case we replace first the passive 5050 with 5250 and keep the same software code version. Does the passive 5250 will sync HA with 5050 active??

Re: Upgrading 5050 to 5250 in Active/Passive Pair

jvalentine — Fri, 22 Dec 2017 16:57:38 GMT

High availability requires that both units are the same model #. You may not HA sync a 5050 with a 5250.

Re: Upgrading 5050 to 5250 in Active/Passive Pair

BPry — Fri, 22 Dec 2017 17:07:06 GMT

@Saadabdulmajeed,

You'll just be doing a standard firewall upgrade/migration. As @jvalentine already noted you won't be able to put a 5050 and a 5250 in an HA configuration. You could simply use the migration tool, or you could simply lift the configuration from the XML files and built it out from there.

Re: Upgrading 5050 to 5250 in Active/Passive Pair

Saadabdulmajeed — Fri, 22 Dec 2017 17:54:09 GMT

Thank you,

the configuration can be migrated from 5050 to 5250 as you said by XML files. But what about the active sessions in the active PAN? if no HA will be between the new 5250 Passivve and 5050 Active, thats mean the traffic will be down when making the 5250 passive to active and replace 5050 active to the other 5250.

Re: Upgrading 5050 to 5250 in Active/Passive Pair

BPry — Fri, 22 Dec 2017 18:01:42 GMT

@Saadabdulmajeed,

You will likely have downtime when replacing your firewalls, you are not able to really make this transition without loosing connection for a little bit.

Now with the proper setup you actually wouldn't have to lose connection. That really depends on what your network looks like.

Re: Upgrading 5050 to 5250 in Active/Passive Pair

OtakarKlier — Fri, 22 Dec 2017 21:17:41 GMT

Hello,

Once again it depends on the use case of the PAN's and your network layout. How about putting the new ones in parrallel with the current ones and transitioning over to the new ones? I think this is what @BPry was referring to.

Just another thought.

Cheers!