VPN50 to Flex 100 migration

Options
LahiZyxel
LahiZyxel Posts: 2
Friend Collector First Comment
in Security

Hello,

VPN 50 is a end of life product.

Is there a migration tool for VPN50 to Flex 100 config?

Accepted Solution

  • Zyxel_Cooldia
    Zyxel_Cooldia Posts: 1,462  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Answer ✓
    Options

    Hi @LahiZyxel ,

    It does not support configuration conversion from VPN series to FLEX/ATP. You need to set up from scratch.

All Replies

  • electsystech
    electsystech Posts: 31  Freshman Member
    First Anniversary 10 Comments Friend Collector
    Options

    There's a conversion utility here https://convert.cloud.zyxel.com but it doesn't like it supports those models.

  • LahiZyxel
    LahiZyxel Posts: 2
    Friend Collector First Comment
    Options
    https://community.zyxel.com/en/discussion/comment/65457#Comment_65457

    I noticed the same. Just wondering, if a FLEX 100 would work with an old VPN50 config file…

  • electsystech
    electsystech Posts: 31  Freshman Member
    First Anniversary 10 Comments Friend Collector
    Options

    If the config is not to complex, I'd just rebuild it from scratch. If it's more complex we've had good success using the CLI and restoring parts of the backup file, eg add address-object section in the CLI. Then if it goes without errors, do the next section. If you get an error, you'll have to figure out what it didn't like.

  • mMontana
    mMontana Posts: 1,337  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    edited May 9
    Options

    I had a not fabulous experience converting from USG 60W to USG Flex 100 W and from USG40 to USG Flex 100. Mostly… Converter automatically enabled payed services (which were not enable on both sources) that created some issues (mail and web filtering) into the end config.

    As stated before, consider to do from scratch the configuration, starting from objects when your placeholder ip addresses are set (and after a whole firmware upgrade run). Reference list will help you to know if there's some remnants into config.

    If the starting configuration is simple, it will be a quite speedy migration.
    If the starting configuration is complex, rich, and probably stale, it would be an hell of opportunity to clear it up and document it in a proper way.

    Of course, the process will be much slower.

  • Zyxel_Cooldia
    Zyxel_Cooldia Posts: 1,462  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Answer ✓
    Options

    Hi @LahiZyxel ,

    It does not support configuration conversion from VPN series to FLEX/ATP. You need to set up from scratch.

Categories

Security Highlight


Read more

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）