cancel
Showing results for 
Search instead for 
Did you mean: 

Configuration migration from Juniper SA2500 to the new PSA3000

DI
Occasional Contributor

Configuration migration from Juniper SA2500 to the new PSA3000

Hello Guys,

New to all this so please forgive me.l have been asked to migrate the configuration from the old Juniper SA2500 to the new PSA3000 appliance and wanted to ask here for the right processor or for any specifics that l should be aware of. Cannot open a KB below:

https://kb.pulsesecure.net/articles/Pulse_Secure_Article/how-to-migrate-configurations-from-an-existing-sa-x000-sa-x500-to-a-new-mag-device/?q=kb39994&l=en_US&fs=RelatedArticle

My understanding that old Juniper SA, MAG and new PSA are all running the same IVE OS. Am l right? Can I easy migrate configuration between different firmware releases e.g (8.2R1and 8.2R7).

Any advice or guidance would be appreciated.

Thank you,
Myky
5 REPLIES 5
Moderator

Re: Configuration migration from Juniper SA2500 to the new PSA3000

Yes, you will need to export the user.cfg from the SA2500 and import it to the PSA3000
If you need to move the certificate, import this via the system.cfg at System>Configuration>Certificates>Device Certificates,import certificate
DI
Occasional Contributor

Re: Configuration migration from Juniper SA2500 to the new PSA3000

Hello,

Thank you for coming back to me. So which file actually holds a system configuration: system.cfg or/and user.cfg?

Thank you,
Mykhaylo
Pulser

Re: Configuration migration from Juniper SA2500 to the new PSA3000

Just to help out. as well, please refer to this document:

https://www.pulsesecure.net/download/techpubs/current/447/pulse-connect-secure/pcs/8.2rx/How_To_SA-MAG_to_PSA_Hardware_Upgrade-v4.pdf

Thanks, hope this helps.
ruc
Pulser

Re: Configuration migration from Juniper SA2500 to the new PSA3000

Majority of the config is in user.cfg

System.cfg contains a few important details such as network settings, cluster settings, license settings, device certificate, snmp settings and syslog servers related settings

When moving from one hardware family to another the general recommendation is:

1. First prepare the destination device with network settings, license, etc (network settings at the very least)

2. Then import the binary system config using the 3rd import option (screenshot and details are here -
https://docs.pulsesecure.net/WebHelp/Content/PCS/PCS_AdminGuide_8.2/Importing%20a%20Binary%20System.htm )

3. Then allow the box to finish restarting services (will happen automatically)

4. Then import the binary user.cfg (this may take longer than step # 2 and #3 as its importing a lot more than system.cfg) however should typically finish within a couple of minutes.

This is the high level. Please refer to the the doc mentioned by 'facusa' for a more detailed version

DI
Occasional Contributor

Re: Configuration migration from Juniper SA2500 to the new PSA3000

Thanks all