VPN50 to Flex 100 migration

LahiZyxel
LahiZyxel Posts: 2
First Comment Friend Collector
in Security

Hello,

VPN 50 is a end of life product.

Is there a migration tool for VPN50 to Flex 100 config?

Accepted Solution

  • Zyxel_Cooldia
    Zyxel_Cooldia Posts: 1,511  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments
    Answer ✓

    Hi @LahiZyxel ,

    It does not support configuration conversion from VPN series to FLEX/ATP. You need to set up from scratch.

All Replies

  • electsystech
    electsystech Posts: 46  Freshman Member
    First Comment Friend Collector Fifth Anniversary

    There's a conversion utility here https://convert.cloud.zyxel.com but it doesn't like it supports those models.

  • LahiZyxel
    LahiZyxel Posts: 2
    First Comment Friend Collector
    https://community.zyxel.com/en/discussion/comment/65457#Comment_65457

    I noticed the same. Just wondering, if a FLEX 100 would work with an old VPN50 config file…

  • electsystech
    electsystech Posts: 46  Freshman Member
    First Comment Friend Collector Fifth Anniversary

    If the config is not to complex, I'd just rebuild it from scratch. If it's more complex we've had good success using the CLI and restoring parts of the backup file, eg add address-object section in the CLI. Then if it goes without errors, do the next section. If you get an error, you'll have to figure out what it didn't like.

  • mMontana
    mMontana Posts: 1,389  Guru Member
    50 Answers 1000 Comments Friend Collector Fifth Anniversary
    edited May 9

    I had a not fabulous experience converting from USG 60W to USG Flex 100 W and from USG40 to USG Flex 100. Mostly… Converter automatically enabled payed services (which were not enable on both sources) that created some issues (mail and web filtering) into the end config.

    As stated before, consider to do from scratch the configuration, starting from objects when your placeholder ip addresses are set (and after a whole firmware upgrade run). Reference list will help you to know if there's some remnants into config.

    If the starting configuration is simple, it will be a quite speedy migration.
    If the starting configuration is complex, rich, and probably stale, it would be an hell of opportunity to clear it up and document it in a proper way.

    Of course, the process will be much slower.

  • Zyxel_Cooldia
    Zyxel_Cooldia Posts: 1,511  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments
    Answer ✓

    Hi @LahiZyxel ,

    It does not support configuration conversion from VPN series to FLEX/ATP. You need to set up from scratch.

  • otiscavin
    otiscavin Posts: 2
    First Comment

    I appreciate how the author has presented complex information in a clear Pokerogue and accessible manner, making it easy for readers to grasp the key concepts.

Categories

Security Highlight


Read more

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）