HA Upgrade

Announcements

ATTENTION Customers, All Partners and Employees: The Customer Support Portal (CSP) will be undergoing maintenance and unavailable on Saturday, November 7, 2020, from 11 am to 11 pm PST. Please read our blog for more information.

Reply
Highlighted
L4 Transporter

HA Upgrade

I found this link on the knowledge base

https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Upgrade-a-High-Availability-HA-Pair/...

Has anyone used this method or any other method that they would like to share. I am currently at 6.1.1 and sounds like its not a good idea to jump all the way to 7.0 but to do it in increments. Can you do the passive side first see if it works and then the active side? Is it possbile to roll back easily?

Highlighted
L0 Member

I have used the method outlined in this document many times and it works fine.  There is no need to download or install minor releases in between the major releases you want. You would just need to download 7.0.1 and then download and install 7.0.3.

Highlighted
L7 Applicator

Just add to it, In case if you face any problem after the software upgrade. Need not to install the previous version again from GUI, you may follow below steps to easily revert the 6.1.x OS. For example: ( you have upgraded the PAN firewall from 6.1.5 to 7.0.1) =========== > debug swm status Partition State Version -------------------------------------------------------------------------------- sysroot0 REVERTABLE 6.1.5 >>>>>>>>> previously installed PAN OS sysroot1 RUNNING-ACTIVE 7.0.1 >>>>>>>>>>>>> currently install maint READY 7.0.1 admin@51-PA-5020> debug swm re > rebuild-content-db Rebuild content database > refresh revert back to last successfully installed content > revert revert back to last successfully installed software admin@51-PA-5020> debug swm revert >>>>>>>>>>>>>>>> apply this single command to revert the PAN OS back to 6.1.5 <<<<<<<< wait for 1 minute >>>>>> admin@51-PA-5020>>request restart system >>>>>>>>> restart the system. Upon reboot the device will come up withPAN OS 6.1.5. Thanks
Highlighted
L7 Applicator

Just add to it,

In case if you face any problem after the software upgrade. Need not to install the previous version again from GUI, you may follow below steps to easily revert the 6.1.x OS.

For example: ( you have upgraded the PAN firewall from 6.1.5 to 7.0.1)

===========

> debug swm status

Partition State Version
--------------------------------------------------------------------------------
sysroot0 REVERTABLE 6.1.5
sysroot1 RUNNING-ACTIVE 7.0.1 >>>>>>>>>>>>> currently installed
maint READY 7.0.1

 

apply this single command to revert the PAN OS back to 6.1.5

 

> debug swm revert

 <<<<<<<< wait for 1 minute >>>>>>

>request restart system >>>>>>>>> restart the system. Upon reboot the device will come up withPAN OS 6.1.5.

 

Thanks

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!