Upgrade for HA Pair

[RyanJohnstone]

Hello, i am looking for some guidance on upgrading a non panorama setup of an Active/Passive HA pair of 3050s.  They are running code 7.1.6 and we would like to move to a later/latest release of 7.1.x

i have searched around but can only find a guide for using Panorama under the upgrade best practices.  is there another guide available which details the process?

Thanks

Ryan

[davanderson]

Hello Ryan,

Here is a guide for best practices on the PA upgrade process:

https://live.paloaltonetworks.com/t5/Featured-Articles/Best-Practices-for-PAN-OS-Upgrade/ta-p/111045

Section 4 outlines the process you are looking for.  After your backups and testing / validation the process is essentially this:

= = = = = = = = = = = = = = = = =
Suspend the Primary
Upgrade the Primary
Reboot the Primary
Resume the Primary
= = = = = = = = = = = = = = = = =
Suspend the Secondary
Upgrade the Secondary
Reboot the Secondary
Resume the Secondary
= = = = = = = = = = = = = = = = =

[RobinClayton]

I have just done it on wednesday morning on a Active/Passive pair.

1) Make sure you disable pre-empt if it's enabled on both devices.

2) Download the image to both devices.

3) Suspend the active {A}

4) Check the other device {B} becomes active and that all services work as expected, if not fail back to {A}.

5) Upgrade {A} and reboot, wait for it to come back online.

6) Suspend the active {B}

7) Check the other device {A} becomes active and that all services work as expected, if not fail back to {B}.

😎 Upgrade {B} and reboot, wait for it to come back online.
9) Check HA Status and Versions match.

Have a console cable and knowledge of how to revert to previous image if it goes wrong.