How to migrate configuration from 3200 series appliance to 5220.

Reply
Highlighted
L2 Linker

How to migrate configuration from 3200 series appliance to 5220.

Hi,

 

Could you please help me to understand the procedure for how to migrate configuration from a 3200 series appliance to 5220.

Highlighted
Cyber Elite

Re: How to migrate configuration from 3200 series appliance to 5220.

Hello,

The high level overview is:

  1. Make sure the 5220 is the same code version as the 3200.
  2. Export the 3200 config
  3. import config into the 5220
  4. make sure the 5220 is working correctly, policies, dynamic updates, HA, etc.
  5. Move cables from 3200 to 5220.
  6. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClQQCA0

Regards,

 

Highlighted
Cyber Elite

Re: How to migrate configuration from 3200 series appliance to 5220.

@JyotiPrakash,

The really important step here is that to directly load the config on the new firewall and have all the stored phash values actually match, you'll need to actually know what you have the master key on your current device set to. Without matching the master key, the phash values stored within the configuration file won't match which will cause a bunch of different issues. 

 

The only other thing to really think about is the media differences of the interfaces, which may require that you utilize different interfaces for some of your connections. The 5220 is only going to have 4 copper Ethernet interfaces on ethernet1/1 through ethernet1/4, where your 3200 device had 8. The good news is that the XML is easy to directly edit if this is the case, as you can simply copy everything under the interface (IE: ethernet1/8) to whatever interface you actually require (IE: ethernet1/3). 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!