Configuration migration tool support across different firewall hardware spec.

Options
Zyxel_Tina
Zyxel_Tina Posts: 370 image  Zyxel Employee
Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 50 Answers First Comment

Currently, the configuration conversion tool only supports the models with similar hardware specifications. Due to hardware and port layout differences, migration across models with different architectures is not supported at this time.

Some users have requested a feature that allows transferring settings between firewalls with different hardware spec. — for example, from a smaller-port model (e.g., FLEX100) to a larger-port model (e.g., FLEX500H).

This suggestion originated from the post found here:

USG Flex H device - Backup/Restore configuration between device - Page 2 — Zyxel Community

If you find this idea useful, please show your support by leaving a comment or voting for it. Your feedback will help us evaluate the feature.

Zyxel Tina

2 votes

Active · Last Updated

Comments

  • Maverick87
    Maverick87 Posts: 59 image  Ally Member
    First Comment Friend Collector

    This situation seems really ridiculous.


    I upgraded from a 100H to a 200H and have approximately 50-60 IoT devices with different needs.
    Some devices need full internet access, others only for firmware updates, and still others NEVER have internet access.
    I manually created more than 70 DHCP reservations and about 80 address objects (without the import feature): IoT devices, LAN devices (work PCs, used for BWM and other devices that require static IPs and some policy rules), WLAN devices, etc.

    It took me more than half a day to reconfigure everything, including new configurations and copying and pasting from the old 100H to the new 200H (copying and pasting the MAC address, description, and hostname for the DHCP reservation, re-creating the address, service object, and groups, NAT, policy rules, session control, and all the configuration on App Patrol by selecting the applications individually).

    I'm sorry but, I don't think you have any idea how much work it took, and by the end of the day I had a headache, hoping everything would work again without any problems.


    I think a complete export of the settings and their re-import is really necessary. If not an automated process, at least a section-by-section export/import of the settings.
    For example, implement an export/import feature for the reserved DHCP list (CSV export is already available; just import based on the same fields as the export). The same goes for the list of apps in App Patrol, objects, NATs... Everything has its own properties, but I don't think it's difficult to create an export/import for each feature.