VM-Series and Panorama Plugins Release Notes
    : Upgrade or Downgrade the VMware NSX Plugin 4.0.0
    Focus
    Download PDF
    Focus
    1. Home
    2. VM-Series and Panorama Plugins Release Notes
    3. Panorama Plugin for VMware NSX
    4. Panorama Plugin for VMware NSX 4.0.0
    5. Upgrade or Downgrade the VMware NSX Plugin 4.0.0
    Download PDF

    VM-Series and Panorama Plugins Release Notes

    Upgrade or Downgrade the VMware NSX Plugin 4.0.0

    Table of Contents

    Upgrade or Downgrade the VMware NSX Plugin 4.0.0

    Use the following procedures to upgrade to or downgrade from Panorama plugin for VMware NSX 4.0.0.

    Upgrade to Panorama Plugin for VMware NSX 4.0.0

    Complete the following procedure to upgrade to Panorama plugin for VMware NSX 4.0.0.
    You must upgrade to the Panorama plugin for VMware NSX 4.0.0 from plugin 3.2.x.
    1. Log in to the passive Panorama peer web interface and upgrade the Panorama plugin for VMware NSX 4.0.0.
      1. Select PanoramaPlugins.
      2. Select Check Now to retrieve a list of available updates.
      3. Select Download in the Action column to download the plugin.
      4. Select the version of the plugin and click Install in the Action column to upgrade the plugin. Panorama will alert you when the upgrade is complete.
    2. Log in to the active Panorama peer web interface and upgrade the Panorama plugin for VMware NSX 4.0.0.
      1. Select PanoramaPlugins.
      2. Select Check Now to retrieve a list of available updates.
      3. Select Download in the Action column to download the plugin.
      4. Select the version of the plugin and click Install in the Action column to upgrade the plugin. Panorama will alert you when the upgrade is complete.

    Downgrade from Panorama Plugin for VMware NSX 4.0.0

    If you need to downgrade the Panorama plugin for VMware NSX from 4.0.0 to 3.2.x from a security-centric deployment, complete the following procedure.
    The Panorama plugin for VMware NSX 4.0.0 can be downgrade for 3.2.x only. No other downgrade path is supported.
    If you set any of the CLI commands on the following list, you must reconfigure the CLI command after downgrading to Panorama plugin for VMware NSX 3.2.x. Do this on both nodes in a Panorama HA deployment.
    • request plugins vmware_nsx nsx_t dau-interval interval <>
    • request plugins vmware_nsx nsx_t auto-sync-interval dag <>
    • request plugins vmware_nsx nsx_t auto-sync-interval profile-security-group <>
    • request plugins vmware_nsx nsx_t auto-sync-interval service-chain <>
    • request plugins vmware_nsx nsx_v dag-sync-interval interval <>
    • request plugins vmware_nsx nsx_v dau-interval interval <>
    • request plugins vmware_nsx global proxy bypass <>
    • request plugins vmware_nsx global curl-timeout timeout <>
    • request plugins vmware_nsx nsx_t trigger-full-sync <>
    If you have another active NSX deployment, do not click on the Remove Config link under PanoramaPlugins before downgrading the plugin. Removing the config from the NSX plugin breaks the configuration for all deployments configured on that plugin.
    The following steps are for an NSX-T security-centric configuration.
    1. Delete steering rules.
      1. Log in to Panorama.
      2. Select PanoramaVMwareNSX-TNetwork IntrospectionRule.
      3. Select each steering rule.
      4. Click Delete.
    2. Delete steering policy.
      1. Select PanoramaVMwareNSX-TNetwork IntrospectionPolicy.
      2. Select each steering policy.
      3. Click Delete.
    3. Commit your changes to Panorama.
    4. Remove any VM-Series firewalls you deployed in NSX-T under the security-centric service definition linked to the service manager.
    5. Remove service definition(s) from your service manager(s).
      1. Select PanoramaVMwareNSX-TService Managers.
      2. Click on your service manager.
      3. Under Service Definitions, select each service definition and click Delete.
      4. Repeat these steps for each service manager.
      5. Click OK.
    6. Remove the membership criteria associated with your security-centric service definition(s).
      1. Select PanoramaVMwareNSX-TMembership Criteria.
      2. Select the service definition(s).
      3. Click Delete.
    7. Delete any NSX-T security-centric service definitions that you unlinked from the service definition in step 5.
      1. Log in to the Panorama web interface.
      2. Select PanoramaVMwareNSX-TService Definitions.
      3. To delete your service definition, check the box next to the service definition name and then click Delete.
      4. Repeat the above step for each NSX-T service definition.
      5. Commit your changes.
    8. Log in to the passive Panorama peer web interface and downgrade the Panorama plugin for VMware NSX 3.2.x.
      Do not use the Remove Config link if you any other active NSX deployments when downgrading.
      1. Verify the configuration from the active Panorama is synchronized on the passive peer by viewing the high availability widget on the Panorama dashboard. If the config sync is in progress, do not initiate the downgrade until it is complete.
      2. Select PanoramaPlugins.
      3. Select Check Now to retrieve a list of available updates.
      4. Select Download in the Action column to download the plugin.
      5. Select the version of the plugin and click Install in the Action column to downgrade the plugin. Panorama will alert you when the downgrade is complete.
    9. Log in to the active Panorama peer web interface and downgrade the Panorama plugin for VMware NSX 3.2.x.
      Do not use the Remove Config link if you any other active NSX deployments when downgrading.
      1. Select PanoramaPlugins.
      2. Select Check Now to retrieve a list of available updates.
      3. Select Download in the Action column to download the plugin.
      4. Select the version of the plugin and click Install in the Action column to downgrade the plugin. Panorama will alert you when the downgrade is complete.

    © 2024 Palo Alto Networks, Inc. All rights reserved.