topic Re: Upgrade for HA Pair in General Topics

Upgrade for HA Pair

RyanJohnstone — Wed, 09 May 2018 09:03:49 GMT

Hello, i am looking for some guidance on upgrading a non panorama setup of an Active/Passive HA pair of 3050s. They are running code 7.1.6 and we would like to move to a later/latest release of 7.1.x

i have searched around but can only find a guide for using Panorama under the upgrade best practices. is there another guide available which details the process?

Thanks

Ryan

Re: Upgrade for HA Pair

davanderson — Wed, 09 May 2018 11:52:53 GMT

Hello Ryan,

Here is a guide for best practices on the PA upgrade process:

https://live.paloaltonetworks.com/t5/Featured-Articles/Best-Practices-for-PAN-OS-Upgrade/ta-p/111045

Section 4 outlines the process you are looking for. After your backups and testing / validation the process is essentially this:

= = = = = = = = = = = = = = = = =
Suspend the Primary
Upgrade the Primary
Reboot the Primary
Resume the Primary
= = = = = = = = = = = = = = = = =
Suspend the Secondary
Upgrade the Secondary
Reboot the Secondary
Resume the Secondary
= = = = = = = = = = = = = = = = =

Re: Upgrade for HA Pair

RobinClayton — Fri, 18 May 2018 10:41:42 GMT

I have just done it on wednesday morning on a Active/Passive pair.

1) Make sure you disable pre-empt if it's enabled on both devices.

2) Download the image to both devices.

3) Suspend the active {A}

4) Check the other device {B} becomes active and that all services work as expected, if not fail back to {A}.

5) Upgrade {A} and reboot, wait for it to come back online.

6) Suspend the active {B}

7) Check the other device {A} becomes active and that all services work as expected, if not fail back to {B}.

😎 Upgrade {B} and reboot, wait for it to come back online.
9) Check HA Status and Versions match.

Have a console cable and knowledge of how to revert to previous image if it goes wrong.