USG Flex H device - Backup/Restore configuration between device

Maverick87
Maverick87 Posts: 35 image  Freshman Member
First Comment Friend Collector
in USG FLEX H Series

Hello everyone,
I have an USG Flex 100H and also an USG Flex 200HP.

It's possible to pass all the configuration from the 100H to 200HP? It's possible to backup the 100H configuration and restore it - as is - to 200HP?

Thank you

All Replies

  • PeterUK
    PeterUK Posts: 4,119 image  Guru Member
    250 Answers 2500 Comments Friend Collector Eighth Anniversary

    Not really the the 100H has a different port layout to 200HP but what I did when with 200H to use else where in my network to 700H is you can copy parts of the config over like address or service objects into the 700H config file.

  • Maverick87
    Maverick87 Posts: 35 image  Freshman Member
    First Comment Friend Collector

    OK but all the Policy Control, Static DHCP configuration, static route, objects and so on?
    OK for the different port layout, but the other things is only configuration.

    OK, you cannot replicate the Interface configuration, but all other things that run on it?
    I configure the new Iface configuration, and then restore the Policy Control, Static DHCP and so on based on the newest Iface config (obviously if the Iface naming is the same).

  • PeterUK
    PeterUK Posts: 4,119 image  Guru Member
    250 Answers 2500 Comments Friend Collector Eighth Anniversary
    edited September 19

    You might might but able to just change the config header from:

    model: USG FLEX 100H

    to

    model: USG FLEX 200HP

    and see if it works

    but you might also need to copy from FLEX200HP the admin password to 100H config to then apply to FLEX200HP.

  • Maverick87
    Maverick87 Posts: 35 image  Freshman Member
    First Comment Friend Collector

    How I change the model into the config header?

    Sure that the first setup of the 200HP is done in it's original config, then I try to apply the config.
    Anyway, the number of port are the same, the only difference between both is the Multi-gig LAN/PoE+ on 200HP (2x2.5Gbit + 6x1Gbit for the 200, 8x1Gbit for the 100)

    image.png image.png

    So the layout seems the same

  • PeterUK
    PeterUK Posts: 4,119 image  Guru Member
    250 Answers 2500 Comments Friend Collector Eighth Anniversary

    open up the config file in notepad it be up the top

  • Zyxel_Tina
    Zyxel_Tina Posts: 270 image  Master Member
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 50 Answers First Comment

    Hi @Maverick87,

    As Peter initially mentioned, due to hardware differences between the USG Flex 100H and 200HP, we generally do not recommend directly transferring the configuration from the 100H to the 200HP. While it might be possible to edit parts of the config file and then apply it to the 200HP, please be aware there are inherent differences in device-specific settings that could lead to unexpected behavior or instability.

    Thank you for your understanding!

    Zyxel Tina

  • GiuseppeR
    GiuseppeR Posts: 502 image  Master Member
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Engineer Level 1 - Nebula First Comment Friend Collector
    edited October 5

    Hi @Zyxel_Tina

    do you plan to release a tool to migrate configurations between models?

    For example, if you plan to migrate from 100H to 200H with Nebula/on-prem it could be useful not to manually copy the config from the old one to the new one, also to give a shorter downtime to the Client

  • Zyxel_Melen
    Zyxel_Melen Posts: 3,930 image  Guru Member
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate

    Hi @GiuseppeR

    May I know the scope of this tool?

    Is it from small model migrate to big model only? Or all H series model can convert?(ex. 700H to 100H)

    Zyxel Melen


  • GiuseppeR
    GiuseppeR Posts: 502 image  Master Member
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Engineer Level 1 - Nebula First Comment Friend Collector
    edited October 8

    Hi @Zyxel_Melen

    both of them. For different reasons… but to give you an example, I plan to migrate 2 ORGs from Flex100 to Flex200 in a month. I have the hardware parts, but I need to wait for the company availability to manage the migration.

    Let me explain about the tool.

    You have the Flex200, a brand new item to be added to an ORG where there is a working Flex100, so almost everything could be migrate (e.g. WAN config like PPPoE and MTU, MAC binding, VLAN etc.). Flex200 has an extra WAN, but for the rest is almost similar to Flex100.

    It could be smooth for the MSP to tell Nebula to move configs from one firewall to a powerful one. It could be nice to have an easy way like when you add another firewall to the same ORG, the Nebula asks you if you are replacing the one that is working.

    So the user could see instantly if there are incompatibilities, and fix them BEFORE unplugging the working firewall.

    Almost zero downtime, if you switch on both firewalls at the same time. Just the time to unplug ethernet cables and connect them to the newest one.

    This could be great also when moving from Flex100H to Flex200H, but in that case some more checks about WANs assignment (for example you set WAN2 to p5). Same idea behind Policies/Objects/filters copy. Instead of manual copy and paste, an easy way to migrate firewalls also to reduce possible mistakes.

    Main configs could be moved also from basic Security Routers to firewall (WAN, LAN, VLAN are in common places, also on Nebula), the same regarding moving from Flex100 to Flex100H and so on.

    If you place on Nebula a tool to check incompatibilites, that will go fast as light.

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）