How to redeploy a panorama when the it fails to come up in AWS

How to redeploy a panorama when the it fails to come up in AWS

496
Created On 01/30/23 12:16 PM - Last Modified 06/18/25 20:50 PM


Objective


  • To redeploy the Panorama on AWS.
  • This is normally done when the Panorama fails to come up or access to Panorama fails (GUI/CLI) and all troubleshooting methods to bring up the Panorama fails.


Environment


  • Panorama deployed in AWS
  • Supported PAN-OS


Procedure


  1. Go to the marketplace and deploy a new panorama, 
  2. When redeploying the panorama in AWS the primary IP (eth0 or management) is assigned by AWS.
  3. This IP may have DHCP by default and may use any random IP in the subnet.
  4. If this is a random IP, the connected firewalls to panorama fails to connect, so change the IP to match the old Panorama.
  5. This can be done by choosing advance network configuration in AWS and configuring the primary IP address.
  6. If the launch fails with the reason "the assigned IP is already in use" or similar message then Terminate the old panorama to release a primary IP address.
  7. Now the new Panorama launch will be successful.

 



Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000sahxCAA&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail