VPN100 to USG FLEX 500H Upgrade Path

Options
MattKRRA
MattKRRA Posts: 3 image  Freshman Member
First Comment Second Anniversary
in USG FLEX H Series

I am getting ready to replace our VPN100 with a USG FLEX 500H. When I go to the online configuration converter and select VPN100, the only option for the target is USG FLEX 200 and USG FLEX 200H.

Is there a path from the VPN100 to the USG FLEX 500H or do I need to configure the 500H manually?

P.S. I tried multiple times to submit this to support via the online submission form and the form never submits.

All Replies

  • Zyxel_Melen
    Zyxel_Melen Posts: 4,870 image  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate
    Options

    Hi @MattKRRA

    VPN100 doesn't support to convert the configuration to USG FLEX 500H since the physical hardware difference. It only support to USG FLEX 200H/200HP.

    However, it is recommended to do the conversion to USG FLEX 200H first so you can copy some part of settings, like security policy & security services, for reducing the configuration period.

    About the failed submit via the online submission form, could you share the site/URL that you submitted?

    Zyxel Melen


  • MattKRRA
    MattKRRA Posts: 3 image  Freshman Member
    First Comment Second Anniversary
    Options

    Hi Zyxel_Melen

    Are you saying that I should convert the VPN100 configuration to USG FLEX 200H and then load it into the USG FLEX 500H as a starting point?

    The URL of the submission form I had trouble with is: https://www.zyxel.com/global/en/form/contact-support

  • PeterUK
    PeterUK Posts: 4,522 image  Guru Member
    250 Answers 2500 Comments Friend Collector Eighth Anniversary
    Options

    Then idea is the format of VPN100 and FLEX 500 H are different like how objects are listed in the config

    so if you convert the VPN100 configuration to USG FLEX 200H you can't use it for 500H but the config file of the convert has compatibility listing of objects so you save the config of 500H open config 500H open then convert for 200H and copy and paste bits of the setup so if you have 200 address objects you can move them over to the 500H config file

  • Zyxel_Melen
    Zyxel_Melen Posts: 4,870 image  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate
    Options
    https://community.zyxel.com/en/discussion/comment/85631#Comment_85631

    No, convert the VPN100 configuration to USG FLEX 200H and then load it into the USG FLEX 500H will not work.

    Please allow me to share the steps:

    1. convert the VPN100 configuration to USG FLEX 200H to get converted configuration.
    2. Access to your USG FLEX 500H and download the start-up configuration.
    3. Open USG FLEX 200H configuration and copy parts of configuration to overwrite the same part in USG FLEX 500H configuration.
      These part only: "dos-prevention", "anti-malware", "app-patrol", "content-filter", "dns-threat-filter", "external-block-list", "ip-reputation", "IPS", "sandbox", "snmp", "url-threat-filter", "address-object" exclude interface-subnet type, "service-object" if you created manually before.
    4. Other part is recommended configuring manually since might relate with interface settings.
    Zyxel Melen


Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）