Compatibility of USG60 with USGFLEX SECURITY GATEWAY 200H

Options
pieroCastampi
pieroCastampi Posts: 27
First Comment
image  Freshman Member
in Security 

I would like to know if the USG60 is compatible with the USG FLEX Security Gateway 200H. To clarify: I need to replace the USG60 at Site 1 with the USG FLEX, while Site 2 still has a USG60. I would like to set up an IPsec VPN between the two—is this possible? Also, I would like to transfer the configuration from the USG60 at Site 1 to the USG FLEX. Is that possible? Grazie

All Replies

  • PeterUK
    PeterUK Posts: 4,738
    250 Answers 2500 Comments Friend Collector Ninth Anniversary
    image  Guru Member
    edited October 1
    Options

    Yes the site to site is compatible for old ZLD to new uOS

    You may have to config from a start over

  • pieroCastampi
    pieroCastampi Posts: 27
    First Comment
    image  Freshman Member
    Options

    ok, grazie

  • Zyxel_Luna
    Zyxel_Luna Posts: 98
    5 Answers First Comment Friend Collector
    image  Zyxel Employee
    Options

    Hi @pieroCastampi,

    1.VPN between the USG60 and the USG FLEX 200H

    Yes, this is possible. The USG FLEX 200H (uOS) can establish a site-to-site IPsec VPN with a ZLD-based firewall such as the USG60. Please make sure that:

    a.Both sides use the same IKE version (we recommend IKEv2), the same pre-shared key, and identical Phase 1 and Phase 2 settings.
    b.The local and remote subnets on both sides match each other.
    c.The USG60 is running the latest available firmware.

    2.Transferring the configuration from the USG60 to the USG FLEX 200H
    The USG60 (ZLD) and the USG FLEX 200H (uOS) run different operating systems, so the USG60 configuration file cannot be imported into the USG FLEX 200H directly.
    Zyxel provides a configuration converter tool that converts configurations from ZLD firewalls to the USG FLEX H series:
    Firewall Configuration Converter

    For more details, you can refer to the following FAQ:
    Configuration migration best practice — Zyxel Community

    Before and after converting:

    a. Back up the USG60's [startup-config.conf] before you convert.
    b. Please note that not all features map one-to-one between the two platforms. Unsupported settings may be adjusted or omitted, so please review the conversion log and verify the interfaces, NAT rules, security policies, and VPN settings after importing. Depending on the source model and firmware version, the converter may not support the USG60 directly. In that case, the configuration needs to be recreated manually on the USG FLEX 200H, using the USG60 settings as a reference.

    Please feel free to reach out if you have any questions. Thank you for your continued support of Zyxel.

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）