Upgrade for HA Pair

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Upgrade for HA Pair

L2 Linker

Hello, i am looking for some guidance on upgrading a non panorama setup of an Active/Passive HA pair of 3050s.  They are running code 7.1.6 and we would like to move to a later/latest release of 7.1.x

 

i have searched around but can only find a guide for using Panorama under the upgrade best practices.  is there another guide available which details the process?

 

Thanks

 

Ryan

2 REPLIES 2

L3 Networker

Hello Ryan,

 

Here is a guide for best practices on the PA upgrade process:

 

https://live.paloaltonetworks.com/t5/Featured-Articles/Best-Practices-for-PAN-OS-Upgrade/ta-p/111045

 

Section 4 outlines the process you are looking for.  After your backups and testing / validation the process is essentially this:

 

= = = = = = = = = = = = = = = = =
Suspend the Primary
Upgrade the Primary
Reboot the Primary
Resume the Primary
= = = = = = = = = = = = = = = = =
Suspend the Secondary
Upgrade the Secondary
Reboot the Secondary
Resume the Secondary
= = = = = = = = = = = = = = = = =

I have just done it on wednesday morning on a Active/Passive pair.

 

1) Make sure you disable pre-empt if it's enabled on both devices.

2) Download the image to both devices.

3) Suspend the active {A}

4) Check the other device {B} becomes active and that all services work as expected, if not fail back to {A}.

5) Upgrade {A} and reboot, wait for it to come back online.

6) Suspend the active {B}

7) Check the other device {A} becomes active and that all services work as expected, if not fail back to {B}.

😎 Upgrade {B} and reboot, wait for it to come back online.
9) Check HA Status and Versions match.

 

Have a console cable and knowledge of how to revert to previous image if it goes wrong.

 

 

  • 3191 Views
  • 2 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!