PANORAMA CHANGE HARDWARE

[alle]

Hello world,

I must change a cluster  PA2050 by PA5020 (with the same configuration) and this PA are Managed by Panorama. ( all policies objects are created on Panorama but not policies)

Somebody know how to make this change? which steps?

thanks for your help

Regards

[mmmccorkle]

Alle,

We should be able to take the same policy configured for what was in place (2050) and apply it to the new (5020) assuming that they will be running the same version. If you were going from the 5020 to the 2050, I'd say this would be a little more difficult.

Should be straight forward...

let me know if we can clarify anything more specific you run into.

Thanks!

Please do not forget to mark and 'Helpful' or 'Correct' replies.

[torm · Accepted solution]

As said above, should be pretty straight forward from 2050 to 5020, as they have the same number of ports.

If your object are pushed through Panorama, but you're policies are local, you will need to push the object from Panorama to the new device first.  Panorama objects are not included in the config file when you do a backup locally on the device.

Then you should be able to just load a config backup from you old device on the new device.

- Tor

[pulukas]

I would use the following steps:

• Configure the basic management setup on the new PA
• Add this to Panorama
• Add the new PA to the same group and template as the current
• Push the Panorama settings
• Export the existing PA configuration
• Save the new PA state for potential rollback
• Import and apply the existing PA settings to the new PA
• Edit the mgmt address and host names back to the new PA settings
• commit the changes and confirm the configurations look good
• Schedule a cable swing for the production interfaces from old to new PA

[alle]

thks for your help

I follow this steps and all it's ok !

[pulukas]

Glad to hear all went well.  We like the uneventful cuts.