topic Re: Migrating from 5060 to 5220 in General Topics

Migrating from 5060 to 5220

tirexxerit — Wed, 07 Feb 2018 12:11:27 GMT

Hi,

We are planning to migrate from 5060 to 5220 both should be in PAN-OS 8.0.7 releases.

As per article at https://live.paloaltonetworks.com/t5/Management-Articles/Hardware-Migration-from-PA2000-to-PA3000-or-PA5000/tac-p/156354#M4307 taking device state from older platform and importing to the new one should work.

Has any one done it and experienced any commit error before?

thanks.

Re: Migrating from 5060 to 5220

BPry — Wed, 07 Feb 2018 14:32:04 GMT

@tirexxerit,

I haven't done it in a while because it wasn't uncommon to run into things that I needed to tweak anyways. What I personally recommend is exporting both configurations once a basic setup is complete and simply modifying the XML file directly; this is a fairly straight forward process and handles interface changes a lot better in my experience.

Re: Migrating from 5060 to 5220

pulukas — Sun, 11 Feb 2018 13:00:11 GMT

I have not done this particular move but have others where the interfaces were the same and where they are different.

If the OS version is the same

And the interface numbers the same

You can simply import the existing configuration

You will need to edit the interface names throughout the configuration if they are different. But it looks like your two models are the same.

Re: Migrating from 5060 to 5220

tirexxerit — Tue, 06 Mar 2018 14:12:56 GMT

Thanks for the feedback. Yes interfaces are the same so it shouldn't be really a problem. The only thing is

5060 is on 7.1.x release and new platform is on 8.0.x. I reckon there is no official migration tool

to convert 7.1.x config to 8.0.x and we have to upgrade previous platform first and then export/import

the configuration.

Re: Migrating from 5060 to 5220

BPry — Tue, 06 Mar 2018 17:11:43 GMT

@tirexxerit,

If you are looking to do a strict export/import then yes; you will need the versions to match to actually use this method.

Re: Migrating from 5060 to 5220

OtakarKlier — Tue, 06 Mar 2018 18:38:50 GMT

Hello,

There is a migration tool, however I am not sure if it will handle the change in OS's. I would recommend either to upgrade your current set to the same version or start from scratch (i know its time consuming).

If you upgrade the OS, it would then just be a export config then import config.

Cheers!

Re: Migrating from 5060 to 5220

pulukas — Mon, 12 Mar 2018 10:10:08 GMT

Consider upgrading the currently platform to match the new one first, then you can do the import method.

It is much simpler and less error prone.

Re: Migrating from 5060 to 5220

Dhaval_Patel — Wed, 06 Jan 2021 16:50:53 GMT

@ Tirexxerit

which approach you end up taking for migration. Any advice.
Sounds like import and export device state should work if interface config is like-to-like and on panorama just need to replace old SN (PA-5060) with new (PA-5220).
Please provide some light on this.

Thank you so much!