Downgrade Pan OS

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Downgrade Pan OS

L4 Transporter

Does the debug svm revert still work on the 8 os? 

 

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClcYCAS

8 REPLIES 8

Cyber Elite
Cyber Elite

@jdprovine,

It's debug swm revert; technically this is really just activating the other partition on the system, so while its most commonly used to downgrade PAN-OS it isn't specific to downgrading the software. However, to answer your question this still works perfectly fine and likely isn't a command that will change. 

Community Team Member

@jdprovine,

 

Yup it's still there in PAN-OS 8.1.x as BPry already mentioned :

 

admin@PA-lab> show system info

...

sw-version: 8.1.2

...

 

admin@PA-lab> debug swm revert               [revert back to last successfully installed software]

 

Cheers !

-Kiwi.

 
LIVEcommunity team member, CISSP
Cheers,
Kiwi
Please help out other users and “Accept as Solution” if a post helps solve your problem !

Read more about how and why to accept solutions.

@kiwi @BPry

 

Okay cause when I tried it on my test PA with 8 on it, it gives me an invalid syntax error

Cyber Elite
Cyber Elite

To add to @BPry and @kiwi

 

you will want to check what revertable option is available to you (> debug swm status😞 you can revert to the last version that was 'installed' on the secondary partition

if you followed a linear upgrade path and did not install the next version yet, you will be able to revert to the previous version

if you already installed the _next_ version in line, you will not technicvally be able to 'revert' as the revert action would actually move you forward

 

ie. before installing 8.1.5:

 

admin@PA-200> debug swm status

Partition         State             Version
--------------------------------------------------------------------------------
sysroot0          RUNNING-ACTIVE    8.1.2
sysroot1          REVERTABLE        8.1.1
maint             EMPTY             None

after installing but before rebooting:

 

admin@PA-200> debug swm status

Partition         State             Version
--------------------------------------------------------------------------------
sysroot0          RUNNING-ACTIVE    8.1.2
sysroot1          PENDING-REVERT    8.1.5
maint             EMPTY             None
Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

@reaper @kiwi @BPry

 

go figure now its working LOL

 

debug svm status

 

Partition State Version
--------------------------------------------------------------------------------
sysroot0 RUNNING-ACTIVE 8.1.5
sysroot1 REVERTABLE 8.1.4
maint EMPTY None

 

jprovine@PA220-test-mgt> debug swm revert

Reverting from 8.1.5 (sysroot0) to 8.1.4 (sysroot1)

@reaper @kiwi @BPry -

 

 oops its a typo svm instead of swm

 

 

jprovine@PA220-test-mgt> debug svm status

Invalid syntax.
jprovine@PA220-test-mgt> debug svm status

Did you let auto commit complete?
It may take a moment for swm to become available
Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

@reaper

It was a typo on my part  I entered svm instead of swm LOL 😉

  • 6411 Views
  • 8 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!