We are planning to migrate from 5060 to 5220 both should be in PAN-OS 8.0.7 releases.
As per article at https://live.paloaltonetworks.com/t5/Management-Articles/Hardware-Migration-from-PA2000-to-PA3000-or... taking device state from older platform and importing to the new one should work.
Has any one done it and experienced any commit error before?
I haven't done it in a while because it wasn't uncommon to run into things that I needed to tweak anyways. What I personally recommend is exporting both configurations once a basic setup is complete and simply modifying the XML file directly; this is a fairly straight forward process and handles interface changes a lot better in my experience.
I have not done this particular move but have others where the interfaces were the same and where they are different.
If the OS version is the same
And the interface numbers the same
You can simply import the existing configuration
You will need to edit the interface names throughout the configuration if they are different. But it looks like your two models are the same.
Thanks for the feedback. Yes interfaces are the same so it shouldn't be really a problem. The only thing is
5060 is on 7.1.x release and new platform is on 8.0.x. I reckon there is no official migration tool
to convert 7.1.x config to 8.0.x and we have to upgrade previous platform first and then export/import
There is a migration tool, however I am not sure if it will handle the change in OS's. I would recommend either to upgrade your current set to the same version or start from scratch (i know its time consuming).
If you upgrade the OS, it would then just be a export config then import config.
Consider upgrading the currently platform to match the new one first, then you can do the import method.
It is much simpler and less error prone.
which approach you end up taking for migration. Any advice.
Sounds like import and export device state should work if interface config is like-to-like and on panorama just need to replace old SN (PA-5060) with new (PA-5220).
Please provide some light on this.
Thank you so much!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!