Syntax for PA3050 and PA3020

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Syntax for PA3050 and PA3020

L0 Member

I would like to check if what are the differences between the syntax of xml configuration for the two models? Particularly for the configuration of the two models to the Panorama server.

1 accepted solution

Accepted Solutions

Hi @terence.chan ,

As you can see from the following link importing device state between different model is not officially supported - https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaOCAS

I haven't personally tested this, but based on how similar PA-3020 and PA-3050 are I still believe you could get away with it. But again, according to documentation you shouldn't to it that way.

 

Can you provide more information about the validation error you are receiving? We can try to figure it out.

 

On other hand - if the firewalls are managed by Panorama, probably it will be better to just:

- Configure basic setup in order to allow PA-3050 to reach and connect Panorama

- Once PA-3050 is onboarded on the Panorama, just assign exect same template stack and device group which were used by the old PA-3020.

 

 

View solution in original post

3 REPLIES 3

Hi @terence.chan ,

Can you give some background to your question?

Configuration syntax is heavily depends on the PanOS version, rather than platform you are running. Especially when you are comparing two models from the same series.

If you check the datasheet for PA-3000 series you can see that PA-3050 and PA-3020 actually have exactly the same I/O - https://www.krome.co.uk/wp-content/uploads/2016/06/Palo-Alto-Networks-PA-3000-Series-Datasheet.pdf

The only differences is the maximum performance.

 

So you plan to swap one for the other it shouldn't make any difference from configuration point of view.

Hi @aleksandar.astardzhiev ,

 

I was replacing the PA3020 with a PA3050. There was some issues with the validation when I tried to commit the configurations after importing the device state. It mainly circles around the panorama configurations where the Panorama is setup in HA. Also, the two firewalls (PA3020 and PA3050) are on the same version 8.1.23.

 

The original PA3020 is not functional and the device state was not managed by me, hence I am not sure if the validation issue is due to the differing version of device state at export, or was it due to the incorrect importing of old configurations by importing from device state.

Hi @terence.chan ,

As you can see from the following link importing device state between different model is not officially supported - https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaOCAS

I haven't personally tested this, but based on how similar PA-3020 and PA-3050 are I still believe you could get away with it. But again, according to documentation you shouldn't to it that way.

 

Can you provide more information about the validation error you are receiving? We can try to figure it out.

 

On other hand - if the firewalls are managed by Panorama, probably it will be better to just:

- Configure basic setup in order to allow PA-3050 to reach and connect Panorama

- Once PA-3050 is onboarded on the Panorama, just assign exect same template stack and device group which were used by the old PA-3020.

 

 

  • 1 accepted solution
  • 1752 Views
  • 3 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!