RMA of HA connected to Panorama - PAN-OS 9.1.x Panorama 10.1.x
RMA of HA connected to Panorama - PAN-OS 9.1.x Panorama 10.1.x
Hi, I hope everything is ok.
I have a question regarding the RMA issue.
I have a HA, connected to Panorama, where we have to perform the RMA of one of the firewalls.
I have reviewed some links of the process that still is not quite clear to me how.
The issue here is that we will have to put offline licenses to the new RMA firewall, ie pass the licenses from the portal and then download the license files, offline and manually upload the content and manually perform the Upgrade.
I understand that this point that is offline there is no issue, and then comes all the rest of the process of removing the current and put the new.
Do you have any recommendations, some links to review documentation, some important and critical points to consider.
Thank you very much for your time, collaboration and good vibes.
Best regards
I don't have any documentation on the process you mention, but it should all be doable offline
- download the license files from the portal
- download the content packages
- download all the required software packages
- upload the files to firewall
- upload and install the content packages
- upload and install the software packages. I have seen cases where you did need to upload and install base image before you could move on with the maintenance release
Once the system is set up, see if there's any local config that was backed up that you need to put back before you move on with reintegration into panorama
There's 2 methods for panorama:
Perform a 'replace' command from cli to swap old to new serial and then push the config down
If that doesn't work, join the device the traditional way
- import device
-attach to correct stack and device group
- push config bundle (not commit)