Compatibility of USG60 with USGFLEX SECURITY GATEWAY 200H

pieroCastampi

I would like to know if the USG60 is compatible with the USG FLEX Security Gateway 200H. To clarify: I need to replace the USG60 at Site 1 with the USG FLEX, while Site 2 still has a USG60. I would like to set up an IPsec VPN between the two—is this possible? Also, I would like to transfer the configuration from the USG60 at Site 1 to the USG FLEX. Is that possible? Grazie

PeterUK

Yes the site to site is compatible for old ZLD to new uOS

You may have to config from a start over

pieroCastampi

ok, grazie

Zyxel_Luna

Hi @pieroCastampi,

1.VPN between the USG60 and the USG FLEX 200H

Yes, this is possible. The USG FLEX 200H (uOS) can establish a site-to-site IPsec VPN with a ZLD-based firewall such as the USG60. Please make sure that:

a.Both sides use the same IKE version (we recommend IKEv2), the same pre-shared key, and identical Phase 1 and Phase 2 settings.
b.The local and remote subnets on both sides match each other.
c.The USG60 is running the latest available firmware.

2.Transferring the configuration from the USG60 to the USG FLEX 200H
The USG60 (ZLD) and the USG FLEX 200H (uOS) run different operating systems, so the USG60 configuration file cannot be imported into the USG FLEX 200H directly.
Zyxel provides a configuration converter tool that converts configurations from ZLD firewalls to the USG FLEX H series:
Firewall Configuration Converter

For more details, you can refer to the following FAQ:
Configuration migration best practice — Zyxel Community

Before and after converting:

a. Back up the USG60's [startup-config.conf] before you convert.
b. Please note that not all features map one-to-one between the two platforms. Unsupported settings may be adjusted or omitted, so please review the conversion log and verify the interfaces, NAT rules, security policies, and VPN settings after importing. Depending on the source model and firmware version, the converter may not support the USG60 directly. In that case, the configuration needs to be recreated manually on the USG FLEX 200H, using the USG60 settings as a reference.

Please feel free to reach out if you have any questions. Thank you for your continued support of Zyxel.