Replace portal sectoin with stop/start

Author: vhorne

articles/firewall/premium-migrate.md

@@ -5,7 +5,7 @@ author: vhorne
 ms.service: firewall
 services: firewall
 ms.topic: how-to
-ms.date: 09/13/2021
+ms.date: 10/21/2021
 ms.author: victorh 
 ms.custom: devx-track-azurepowershell
 ---
@@ -164,45 +164,50 @@ TransformPolicyToPremium -Policy $policy
 
 ```
 
-## Migrate an existing standard firewall using the Azure portal
+## Migrate using stop/start
 
-This example shows how to use the Azure portal to migrate a standard firewall (classic rules) to Azure Firewall Premium with a Premium policy.
+If you use Azure Firewall Standard SKU with Firewall Policy, you can use the Allocate/Deallocate method to migrate your Firewall SKU to Premium. This migration approach is supported on both VNet Hub and Secure Hub Firewalls. When you migrate a Secure Hub deployment, it will preserve the firewall public IP address.
+ 
+### Migrate a VNET Hub Firewall
 
-1. From the Azure portal, select your standard firewall. On the **Overview** page, select **Migrate to firewall policy**.
+- Deallocate the Standard Firewall 
 
-   :::image type="content" source="media/premium-migrate/firewall-overview-migrate.png" alt-text="Migrate to firewall policy":::
+   ```azurepowershell
+   $azfw = Get-AzFirewall -Name "<firewall-name>" -ResourceGroupName "<resource-group-name>"
+   $azfw.Deallocate()
+   Set-AzFirewall -AzureFirewall $azfw
+   ```
 
-1. On the **Migrate to firewall policy** page, select **Review + create**.
-1. Select **Create**.
 
-   The deployment takes a few minutes to complete.
-1. Use the `Transform-Policy.ps1` [Azure PowerShell script](#migrate-an-existing-policy-using-azure-powershell) to transform this new standard policy into a Premium policy.
-1. On the portal, select your standard firewall resource. 
-1. Under **Automation**, select **Export template**. Keep this browser tab open. You'll come back to it later.
-   > [!TIP]
-   > To ensure you don't lose the template, download and save it in case your browser tab gets closed or refreshed.
-1. Open a new browser tab, navigate to the Azure portal, and open the resource group that contains your firewall.
-1. Delete the existing standard firewall instance.
+- Allocate Firewall Premium
 
-   This takes a few minutes to complete.
+   ```azurepowershell
+   $azfw = Get-AzFirewall -Name "<firewall-name>" -ResourceGroupName "<resource-group-name>"
+   $azfw.Sku.Tier="Premium"
+   $azfw.Allocate($vnet,$pip, $mgmtpip)
+   Set-AzFirewall -AzureFirewall $azfw
+   ```
 
-1. Return to the browser tab with the exported template.
-1. Select **Deploy**, then on the **Custom deployment** page select **Edit template**.
-1. Edit the template text:
-   
-   1. Under the `Microsoft.Network/azureFirewalls` resource, under `Properties`, `sku`, change the `tier` from "Standard" to "Premium".
-   1. Under the template `Parameters`, change `defaultValue` for the `firewallPolicies_FirewallPolicy_,<your policy name>_externalid` from:
-      
-       `"/subscriptions/<subscription id>/resourceGroups/<your resource group>/providers/Microsoft.Network/firewallPolicies/FirewallPolicy_<your policy name>"`
+### Migrate a Secure Hub Firewall
 
-      to:
+The minimum Azure PowerShell version requirement is 6.5.0. For more information, see [Az 6.5.0](https://www.powershellgallery.com/packages/Az/6.5.0).
 
-      `"/subscriptions/<subscription id>/resourceGroups/<your resource group>/providers/Microsoft.Network/firewallPolicies/FirewallPolicy_<your policy name>_premium"`
-1. Select **Save**.
-1. Select **Review + Create**.
-1. Select **Create**.
+- Deallocate the Standard Firewall
 
-When the deployment completes, you can now configure all the new Azure Firewall Premium features.
+   ```azurepowershell
+   $azfw = Get-AzFirewall -Name "<firewall-name>" -ResourceGroupName "<resource-group-name>"
+   $azfw.Deallocate()
+   Set-AzFirewall -AzureFirewall $azfw
+   ```
+
+- Allocate Firewall Premium
+
+   ```azurepowershell
+   $azfw = Get-AzFirewall -Name -Name "<firewall-name>" -ResourceGroupName "<resource-group-name>"
+   $azfw.Sku.Tier="Premium"
+   $azfw.Allocate($hub.id)
+   Set-AzFirewall -AzureFirewall $azfw
+   ```
 
 ## Next steps