I have a PA220 HA cluster managed by Pano. One of the 220's has bad hardware and needs replaced.
I've seen a bunch of different articles from Palo on how to do this, but nothing that just spells it out. Any general steps would be appreciated.
top of page
All things Palo Alto Networks
Forum: Forum
bottom of page
First you will need to set the new device up with the 'unique' characteristics of the device it is replacing (IP, gateway, DNS)
if all of the device config is pushed through panorama, move on to panorama, else join the device to the cluster and make sure all 'local' config is synced/set properly)
-cluster config
-dynamic updates
-service routes
-management config
-certificates
-...
If you have a config backup, now is a good time to go find that so you can import it (panorama should have one)
From Panorama's perspective, you can run the replace command to simply switch a serial number so all config that existed for the old device now applies to the new device. then commit to panorama and push to the new device
> replace device old xxx new yyy