USG Flex H device - Backup/Restore configuration between device

2»

All Replies

  • Zyxel_Tina
    Zyxel_Tina Posts: 336 image  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 50 Answers First Comment

    Hi users,

    After discussion, we do not have plan to implement or support configuration conversion across firewall devices with different hardware spec. Therefore, we’ll create an idea post to monitor the feedback.

    Thank you for your input and we appreciate your understanding.

    Zyxel Tina

  • Zyxel_Tina
    Zyxel_Tina Posts: 336 image  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 50 Answers First Comment

    Hi users,

    Idea post:

    Configuration migration tool support across different firewall hardware spec. — Zyxel Community

    Please don’t forget to give it a vote if you also like this request.

    Zyxel Tina

  • Maverick87
    Maverick87 Posts: 55 image  Ally Member
    First Comment Friend Collector

    Hi @Zyxel_Tina, @Zyxel_Melen

    This situation seems really ridiculous.


    I upgraded from a 100H to a 200H and have approximately 50-60 IoT devices with different needs.
    Some devices need full internet access, others only for firmware updates, and still others NEVER have internet access.
    I manually created more than 70 DHCP reservations and about 80 address objects (without the import feature): IoT devices, LAN devices (work PCs, used for BWM and other devices that require static IPs and some policy rules), WLAN devices, etc.

    It took me more than half a day to reconfigure everything, including new configurations and copying and pasting from the old 100H to the new 200H (copying and pasting the MAC address, description, and hostname for the DHCP reservation, re-creating the address, service object, and groups, NAT, policy rules, session control, and all the configuration on App Patrol by selecting the applications individually).

    I'm sorry but, I don't think you have any idea how much work it took, and by the end of the day I had a headache, hoping everything would work again without any problems.


    I think a complete export of the settings and their re-import is really necessary. If not an automated process, at least a section-by-section export/import of the settings.
    For example, implement an export/import feature for the reserved DHCP list (CSV export is already available; just import based on the same fields as the export). The same goes for the list of apps in App Patrol, objects, NATs... Everything has its own properties, but I don't think it's difficult to create an export/import for each feature.

  • Zyxel_Tina
    Zyxel_Tina Posts: 336 image  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 50 Answers First Comment

    Hi @Maverick87,

    Thank you very much for your detailed feedback.

    1. After confirmation, since the USG FLEX 100H and USG FLEX 200HP share the same port number and layout, the configuration file from the 100H can be applied to the 200HP by modifying the header line. Under this condition, moving from a smaller model to a larger one will not encounter object or rule limit issues, so the conversion should work smoothly.
    2. Additionally, we’d like to share that firmware v1.37 will introduce a DHCP reserved list import feature. This should make future configuration conversions or migrations even more convenient.

    Hope this helps clarify and address your concerns.

    Zyxel Tina

  • Maverick87
    Maverick87 Posts: 55 image  Ally Member
    First Comment Friend Collector

    Hi @Zyxel_Tina ,

    thank you for your reply.

    Good to hear this, but I've already done the movement in the "old style" manner unfortunately.
    The problem I think remain, because there isn't any "convertion" tool that can be help and I don't think that this is good.

    OK thanks for implement the DHCP reserverd list import, but I think is necessary to implement this for all the others features that can be used (I think is sufficient also to support the import feature for all the features that require a lot of hand-made works).

    Thank you

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）