Export / Import system state general global parameters

[ET]

Hi

How can I Export / Import system state global parameters such as cfg.general.max-arp shown in command:

show system state 

Thx

[reaper]

That's a chassis dependent parameter so it can't be exported/imported

is there a specific reason you want to export/import these ? (are you trying to increase the maximum supported arp entries on a smaller platform ? )

[ET]

Yes - replacing a machine.

When I replace a machine, how can I copy all these settings (Assuming some of them were changed)

[reaper · Accepted solution]

Hi

None of these can be changed, they are inherent to the system hardware (so any PA-3020 will have an identical set as any other PA-3020. any PA-200 will have an identical set to other PA-200. etc. and they are incompatible with other chassis)

[ET]

Thank you

But what about parameters like tcp-reject-non-syn for example?

[reaper · Accepted solution]

ah! 

but that is not a system state setting 😄

there are 2 ways of implementing tcp-non-syn bypass (as reject is the default setting on all platforms)

so in case you do have an asymmetry in your network design that requires you to use this setting, I would recommend using the configuration mode setting

> configure 
Entering configuration mode
[edit]     
this is the global setting                                                                     
#set deviceconfig setting session tcp-reject-non-syn <yes|no> 
this is the zone-based equivalent
#set network profiles zone-protection-profile <name> tcp-reject-non-syn <global|yes|no>

rather than the operational mode setting (which should be used for troubleshooting and not permanent changes):

> set session tcp-reject-non-syn <yes|no>

the configuration mode settings will be included in your exportable config file while the operational commands will not (but arguably should not as they are not intended to be permanent)

[ET]

Thx

So there is nothing at all I should ever copy from system state to another machine, right?

[reaper]

the system state cannot be copied as it is a summary of your system's overall 'being'

FYI a "device state" can be moved over to a new machine (this includes panorama config)