topic Re: upgrade 7.1 to 8.1 ha pair and panorama in General Topics

upgrade 7.1 to 8.1 ha pair and panorama

yhlee1 — Sun, 11 Aug 2019 16:09:09 GMT

Hello,

I'm going to upgrade pa 5020 *2 and m 500 to 8.1.9 from 7.1.18.

My plan is:

Upgrade 8.0.19 M-500

upgrade 8.0.19 passive

upgrade 8.0.19 active

upgrade 8.1.9 M-500

upgrade 8.1.9 passive

upgrade 8.1.9 active

Log migration for M-500

My concern is when I upgrade M-500, stored log should be remain. Are the logs removed when upgrade panorama device?

And Is it ok to do log migration after 8.1.9 upgrade is finished? How long does it take?(5TB log storage)

Re: upgrade 7.1 to 8.1 ha pair and panorama

reaper — Mon, 19 Aug 2019 12:37:16 GMT

logs will not be deleted after a major upgrade

one key thing to keep in mind is that the log database needs to be upgraded also, so after the device comes back online after the reboot, the autocommitmay take a really long time whiole the database is updated. key is not to panic at this time as the process may appear stalled, but interfering could cause issues

Re: upgrade 7.1 to 8.1 ha pair and panorama

yhlee1 — Mon, 19 Aug 2019 13:33:39 GMT

Thanks Reaper,

What about the log migration? Can I do it after upgrading 8.1?

And could you tell me approx time of restarting after major upgrade?(5020 and 5TB panorama)

Additionally, I'm thinking stop forwarding log from managed devices during upgrade, restart from where I stopped.

I found cmd 'request log-fwd-ctr action start-from-lastack', will it do as I think?

Again, thx for your answer.

Re: upgrade 7.1 to 8.1 ha pair and panorama

reaper — Mon, 19 Aug 2019 21:26:08 GMT

What is your intention of the log migration? To a new device, off to a backup location,... ? The time can depend heavily on several factors (volume of logs, reports, config complexity/size) so it's hard to say . I'd reserve an hour just to be sure you dont run into time constraint. If you first stop log forwarding you can then continue, but his will happen automatically during the upgrade so no logs will be lost during the upgrade process