HA Upgrade

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

HA Upgrade

L4 Transporter

I found this link on the knowledge base

https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Upgrade-a-High-Availability-HA-Pair/...

Has anyone used this method or any other method that they would like to share. I am currently at 6.1.1 and sounds like its not a good idea to jump all the way to 7.0 but to do it in increments. Can you do the passive side first see if it works and then the active side? Is it possbile to roll back easily?

3 REPLIES 3

L0 Member

I have used the method outlined in this document many times and it works fine.  There is no need to download or install minor releases in between the major releases you want. You would just need to download 7.0.1 and then download and install 7.0.3.

L7 Applicator
Just add to it, In case if you face any problem after the software upgrade. Need not to install the previous version again from GUI, you may follow below steps to easily revert the 6.1.x OS. For example: ( you have upgraded the PAN firewall from 6.1.5 to 7.0.1) =========== > debug swm status Partition State Version -------------------------------------------------------------------------------- sysroot0 REVERTABLE 6.1.5 >>>>>>>>> previously installed PAN OS sysroot1 RUNNING-ACTIVE 7.0.1 >>>>>>>>>>>>> currently install maint READY 7.0.1 admin@51-PA-5020> debug swm re > rebuild-content-db Rebuild content database > refresh revert back to last successfully installed content > revert revert back to last successfully installed software admin@51-PA-5020> debug swm revert >>>>>>>>>>>>>>>> apply this single command to revert the PAN OS back to 6.1.5 <<<<<<<< wait for 1 minute >>>>>> admin@51-PA-5020>>request restart system >>>>>>>>> restart the system. Upon reboot the device will come up withPAN OS 6.1.5. Thanks

L7 Applicator

Just add to it,

In case if you face any problem after the software upgrade. Need not to install the previous version again from GUI, you may follow below steps to easily revert the 6.1.x OS.

For example: ( you have upgraded the PAN firewall from 6.1.5 to 7.0.1)

===========

> debug swm status

Partition State Version
--------------------------------------------------------------------------------
sysroot0 REVERTABLE 6.1.5
sysroot1 RUNNING-ACTIVE 7.0.1 >>>>>>>>>>>>> currently installed
maint READY 7.0.1

 

apply this single command to revert the PAN OS back to 6.1.5

 

> debug swm revert

 <<<<<<<< wait for 1 minute >>>>>>

>request restart system >>>>>>>>> restart the system. Upon reboot the device will come up withPAN OS 6.1.5.

 

Thanks

  • 3410 Views
  • 3 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!