we have a replacement of a palo alto coming up.
the actual migration is I believe from a 3050 model running pan-os 7.0.12
and the config needs to be migrated to a pa 5220 (whic I believe can't run pan-os 7.x but comes with 8.0.0 minimum.
due to security reasons I'm not able to take teh existing config. install it on a lab devic, upgrade that device to get a decent 8.x config.
and upgrading the production device to 8.x first is also not an option.
is there another way to get the config to a 8.x? as just export, import of config will nog work is not recommended.
I read about the migration tool. however:
version 3.3 does not support pan-os 8 currently. (but I read someone using a 7.1 config from teh tool which would load on a 8.0.0 device.
I am running the tool on a vmware player to test. however I can upload a config. and then download that again. but I can't seem to find (nor in guide) where I can configure it that i upload a 7.0.13 config. and download a 7.1.0 config from it. so I'm missing that part of information/knowledge.
thank you for the info.
as stated upgrading was not an option so I had to go with option 2.
however the info I got for this was incorrect as the customer was running 7.1.x not 7.0.
for what it's worth. going from 7.1 to 8.0.13 the only errors I got were related to HA interfaces.
pa5220 has dedicated ha1-a and ha1-b interfaces for ha1. so I had to remove the old (dedicated port for ha1 configuration)
same with ha2 --> had to manually define a new port to be ha2 as pa5220 standard uses a HSCI slot for ha2.
once I had corrected those 2 minor issues I got no more errors/warnings during commit.
so all in all a lot less hassle then what I was expecting to get.
the marked as solution basically tells you what to do.
it is preferred that you upgrade your existing hardware to version 8.0 (or 8.1) and then copy that config to the new model running the same version.
but if that is not an option you can try migrating it as is and work through the various errors you get( mostly easy to understand error descriptions)
I would recommend only 1 version difference though.
so if your existing config is 7.1.x I would install version 8.0.x on the new unit first. and once the config is succesfully installed on the new hardware upgrade to 8.1.x (as 8.0 is only supported until oktober this year I believe)
as for documentation what to do: well you can follow the normal documents for migrating config between 2 hardware. but need to account for some possible additional errors as your config is also jumping up on OS release.
step by step procedure I can't give as I suspect the errors can/will very from config to config.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!