<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Change  physical port in Active PAssive PA going to ISP in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/change-physical-port-in-active-passive-pa-going-to-isp/m-p/292700#M77428</link>
    <description>&lt;P&gt;Can you please explain in more detailed steps?&lt;/P&gt;</description>
    <pubDate>Fri, 11 Oct 2019 21:34:57 GMT</pubDate>
    <dc:creator>MP18</dc:creator>
    <dc:date>2019-10-11T21:34:57Z</dc:date>
    <item>
      <title>Change  physical port in Active PAssive PA going to ISP</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/change-physical-port-in-active-passive-pa-going-to-isp/m-p/292609#M77402</link>
      <description>&lt;P&gt;PA is in Active Passive mode.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Current uplink connection from active PA going to ISP is 1Gig.&lt;/P&gt;&lt;P&gt;We need to change the uplink port on the active PA that can support 10gig.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;What is best method to do this without causing least amount of outage?&lt;/P&gt;</description>
      <pubDate>Fri, 11 Oct 2019 15:53:51 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/change-physical-port-in-active-passive-pa-going-to-isp/m-p/292609#M77402</guid>
      <dc:creator>MP18</dc:creator>
      <dc:date>2019-10-11T15:53:51Z</dc:date>
    </item>
    <item>
      <title>Re: Change  physical port in Active PAssive PA going to ISP</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/change-physical-port-in-active-passive-pa-going-to-isp/m-p/292666#M77406</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;There might be some disruption so I would do it in a maintenance window.&lt;/P&gt;&lt;OL&gt;&lt;LI&gt;Plug new 10G into the PAN&lt;/LI&gt;&lt;LI&gt;setup new interface and routing&lt;/LI&gt;&lt;LI&gt;verify all traffic is now flowing over the 10G link,&lt;/LI&gt;&lt;LI&gt;Remove the 1G link config and routes&lt;/LI&gt;&lt;LI&gt;Remove the 1G link&lt;/LI&gt;&lt;/OL&gt;&lt;P&gt;Obviously an over simplified process. The biggest things that are susceptible to interruption are Video and Audio calls.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Regards,&lt;/P&gt;</description>
      <pubDate>Fri, 11 Oct 2019 20:09:02 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/change-physical-port-in-active-passive-pa-going-to-isp/m-p/292666#M77406</guid>
      <dc:creator>OtakarKlier</dc:creator>
      <dc:date>2019-10-11T20:09:02Z</dc:date>
    </item>
    <item>
      <title>Re: Change  physical port in Active PAssive PA going to ISP</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/change-physical-port-in-active-passive-pa-going-to-isp/m-p/292696#M77424</link>
      <description>&lt;P&gt;Thanks for the reply&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Should i suspend the passive PA and do the config there first and then do the commit on suspended PA?&lt;/P&gt;&lt;P&gt;After that suspend the active PA and make sure Passive PA with new config and port becomes active?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Fri, 11 Oct 2019 21:09:22 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/change-physical-port-in-active-passive-pa-going-to-isp/m-p/292696#M77424</guid>
      <dc:creator>MP18</dc:creator>
      <dc:date>2019-10-11T21:09:22Z</dc:date>
    </item>
    <item>
      <title>Re: Change  physical port in Active PAssive PA going to ISP</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/change-physical-port-in-active-passive-pa-going-to-isp/m-p/292697#M77425</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;I would say you might be introducing more complexity. By suspending the passive all you are doing is suspending the HA. You would need to activate it prior to suspending the active otherwise both will be offline and not passive traffic. Plus once the passive reconnects to the active, it will sync configs.&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I would do it on the active in a maintenance window, you can always revert the config if something goes wrong.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Regards,&lt;/P&gt;</description>
      <pubDate>Fri, 11 Oct 2019 21:16:11 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/change-physical-port-in-active-passive-pa-going-to-isp/m-p/292697#M77425</guid>
      <dc:creator>OtakarKlier</dc:creator>
      <dc:date>2019-10-11T21:16:11Z</dc:date>
    </item>
    <item>
      <title>Re: Change  physical port in Active PAssive PA going to ISP</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/change-physical-port-in-active-passive-pa-going-to-isp/m-p/292698#M77426</link>
      <description>&lt;P&gt;So how to do in active ?&lt;/P&gt;&lt;P&gt;Do i need to suspend it first?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Then passive will become active.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I can move the port to 10Gig and do all the changes on the suspended&amp;nbsp;&lt;/P&gt;&lt;P&gt;Then can i do the commit on the suspended?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;then make this suspended functional again?&lt;/P&gt;</description>
      <pubDate>Fri, 11 Oct 2019 21:22:37 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/change-physical-port-in-active-passive-pa-going-to-isp/m-p/292698#M77426</guid>
      <dc:creator>MP18</dc:creator>
      <dc:date>2019-10-11T21:22:37Z</dc:date>
    </item>
    <item>
      <title>Re: Change  physical port in Active PAssive PA going to ISP</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/change-physical-port-in-active-passive-pa-going-to-isp/m-p/292699#M77427</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;Sorry I misread the original question. I would still do it live however with a slight twist. Yes there will be a slight interruption when you move the cable and commit changes.&lt;/P&gt;&lt;OL&gt;&lt;LI&gt;Setup the new interface and routing to be the new interface&lt;OL&gt;&lt;LI&gt;DO NOT COMMIT THE CHANGES&lt;/LI&gt;&lt;/OL&gt;&lt;/LI&gt;&lt;LI&gt;Commit the changes and then move the physical cable to the new port at the same time.&lt;/LI&gt;&lt;/OL&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Hope that helps.&lt;/P&gt;</description>
      <pubDate>Fri, 11 Oct 2019 21:25:50 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/change-physical-port-in-active-passive-pa-going-to-isp/m-p/292699#M77427</guid>
      <dc:creator>OtakarKlier</dc:creator>
      <dc:date>2019-10-11T21:25:50Z</dc:date>
    </item>
    <item>
      <title>Re: Change  physical port in Active PAssive PA going to ISP</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/change-physical-port-in-active-passive-pa-going-to-isp/m-p/292700#M77428</link>
      <description>&lt;P&gt;Can you please explain in more detailed steps?&lt;/P&gt;</description>
      <pubDate>Fri, 11 Oct 2019 21:34:57 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/change-physical-port-in-active-passive-pa-going-to-isp/m-p/292700#M77428</guid>
      <dc:creator>MP18</dc:creator>
      <dc:date>2019-10-11T21:34:57Z</dc:date>
    </item>
    <item>
      <title>Re: Change  physical port in Active PAssive PA going to ISP</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/change-physical-port-in-active-passive-pa-going-to-isp/m-p/292701#M77429</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;I'll do my best but without knowing you entire config its still going to be high level and you'll have to fill in the blanks.&lt;/P&gt;&lt;OL&gt;&lt;LI&gt;Setup the 10G interface identical to the 1g interface except for any IP's&lt;OL&gt;&lt;LI&gt;commit the changes&lt;/LI&gt;&lt;/OL&gt;&lt;/LI&gt;&lt;LI&gt;Remove the config from the 1g interface, add the ip's to the 10g interface, and change routing so it will go out the proper interface&lt;OL&gt;&lt;LI&gt;DO NOT COMMIT CHANGES&lt;/LI&gt;&lt;/OL&gt;&lt;/LI&gt;&lt;LI&gt;Commit the changes and at the same time move the cable from the 1G interface to the 10G interface.&lt;/LI&gt;&lt;/OL&gt;&lt;P&gt;Hope that helps.&lt;/P&gt;</description>
      <pubDate>Fri, 11 Oct 2019 21:39:30 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/change-physical-port-in-active-passive-pa-going-to-isp/m-p/292701#M77429</guid>
      <dc:creator>OtakarKlier</dc:creator>
      <dc:date>2019-10-11T21:39:30Z</dc:date>
    </item>
    <item>
      <title>Re: Change  physical port in Active PAssive PA going to ISP</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/change-physical-port-in-active-passive-pa-going-to-isp/m-p/292702#M77430</link>
      <description>&lt;P&gt;So i can do these changes on active and passive PA at same time?&lt;/P&gt;</description>
      <pubDate>Fri, 11 Oct 2019 21:44:26 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/change-physical-port-in-active-passive-pa-going-to-isp/m-p/292702#M77430</guid>
      <dc:creator>MP18</dc:creator>
      <dc:date>2019-10-11T21:44:26Z</dc:date>
    </item>
    <item>
      <title>Re: Change  physical port in Active PAssive PA going to ISP</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/change-physical-port-in-active-passive-pa-going-to-isp/m-p/292703#M77431</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;Once you commit the changes on the active, the passive will get them as well. Its part of the beauty of HA. I also realized I didnt need one of the steps, so here is the revised version.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;OL&gt;&lt;LI&gt;Setup the 10G interface identical to the 1g interface except for any IP's&lt;OL&gt;&lt;LI&gt;commit the changes&lt;/LI&gt;&lt;/OL&gt;&lt;/LI&gt;&lt;LI&gt;Remove the config from the 1g interface, add the ip's to the 10g interface, and change routing so it will go out the proper interface.&lt;/LI&gt;&lt;LI&gt;Commit the changes and at the same time move the cable from the 1G interface to the 10G interface.&lt;/LI&gt;&lt;/OL&gt;&lt;P&gt;Regards,&lt;/P&gt;</description>
      <pubDate>Fri, 11 Oct 2019 21:47:22 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/change-physical-port-in-active-passive-pa-going-to-isp/m-p/292703#M77431</guid>
      <dc:creator>OtakarKlier</dc:creator>
      <dc:date>2019-10-11T21:47:22Z</dc:date>
    </item>
    <item>
      <title>Re: Change  physical port in Active PAssive PA going to ISP</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/change-physical-port-in-active-passive-pa-going-to-isp/m-p/292704#M77432</link>
      <description>&lt;P&gt;My bad i mean to say should i move cables from 1gig to 10gig connection on both active and passive at the same time?&lt;/P&gt;</description>
      <pubDate>Fri, 11 Oct 2019 21:51:03 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/change-physical-port-in-active-passive-pa-going-to-isp/m-p/292704#M77432</guid>
      <dc:creator>MP18</dc:creator>
      <dc:date>2019-10-11T21:51:03Z</dc:date>
    </item>
    <item>
      <title>Re: Change  physical port in Active PAssive PA going to ISP</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/change-physical-port-in-active-passive-pa-going-to-isp/m-p/292705#M77433</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;That would depend on if you have any Link or path monitoring. If yes then I would disable them and move them at the same time. If not, then still move them at the same time but now you dont have to disable the link or path monitoring.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Regards,&lt;/P&gt;</description>
      <pubDate>Fri, 11 Oct 2019 21:56:03 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/change-physical-port-in-active-passive-pa-going-to-isp/m-p/292705#M77433</guid>
      <dc:creator>OtakarKlier</dc:creator>
      <dc:date>2019-10-11T21:56:03Z</dc:date>
    </item>
    <item>
      <title>Re: Change  physical port in Active PAssive PA going to ISP</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/change-physical-port-in-active-passive-pa-going-to-isp/m-p/292706#M77434</link>
      <description>&lt;P&gt;Yes i have path monitoring.&lt;/P&gt;&lt;P&gt;Will follow the steps.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Many thanks again!&lt;/P&gt;</description>
      <pubDate>Fri, 11 Oct 2019 21:59:12 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/change-physical-port-in-active-passive-pa-going-to-isp/m-p/292706#M77434</guid>
      <dc:creator>MP18</dc:creator>
      <dc:date>2019-10-11T21:59:12Z</dc:date>
    </item>
  </channel>
</rss>

