Operators send notification emails about Gateway migration to Administrators with Super User privileges. Plan your migration based on the notification email that you receive from your Operator. You can migrate your quiesced Gateways using the new Orchestrator UI only.

To avoid any service disruption, ensure that you migrate to the new Gateway within the Migration Deadline mentioned in the notification email.

To migrate from a quiesced Gateway to a new Gateway:

Prerequisites

Before you migrate the Edges and NSDs from the quiesced Gateway to the new Gateway, ensure that you schedule a maintenance window as traffic may be disrupted during migration.

Procedure

  1. In the Enterprise portal, click the Open New Orchestrator UI option available at the top of the Window.
  2. Click Launch New Orchestrator UI in the pop-up window. The UI opens in a new tab.
  3. Go to Settings > Gateway Migration. The list of quiesced Gateways appears.
  4. Click Start for the quiesced Gateway from which you want to migrate to the new Gateway.
  5. Make the required configuration to all the NSDs that are configured through the quiesced Gateway.
    1. Click the View IKE IPSec link to view a sample configuration for the NSD. Copy the template and customize it to suit your deployment.
    2. Add the IP address of the new Gateway to each NSD configured for the quiesced Gateway.
      For example, if you have configured an NSD for AWS, you must add the IP address of the new Gateway in the NSD configuration in the AWS instance.
    3. After making the configuration changes to all the NSDs, select the The listed NSD site(s) have been configured check box, and then click Next.
    Note: The Configure NSD Site(s) option is not available for NSDs configured automatically as well as for Gateways with Data Plane role that are not attached to any NSDs.
  6. Select each NSD and click Switch Gateway to switch the traffic from the quiesced Gateway to the new Gateway.
    1. In the Switch Gateway pop-up window, select the The NSD site has been configured check box to confirm that you have made the required configuration changes to the NSD.
      Note: This confirmation is not applicable for NSDs configured automatically.
    2. Click Switch Gateway.
      It may take few minutes to verify the tunnel status. The IP address of the quiesced Gateway is replaced with the IP address of the new Gateway so that the traffic switches to the new Gateway. The Migration Status changes to "NSD Tunnels are up and running". If the Switch Gateway action fails, see What to do When Switch Gateway Action Fails.
    3. Click Next.
      Note: The Switch Gateway option is not available for Gateways with Data Plane role that are not attached to any NSDs.
  7. Rebalance either all Edges or the required Edges that are connected to the quiesced Gateway so that the Edges get reassigned to the new Gateway.
  8. Click Finish to complete the Gateway migration.

Results

Go to the Gateway Migration page to review the migration steps, if required. The Gateways that have been migrated remain in this page until the Migration Deadline assigned for the quiesced Gateway. After the Migration Deadline, you can view the history of migration events in the Monitor > Events page.