Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    How to restore PFsense config if it fails?

    Scheduled Pinned Locked Moved General pfSense Questions
    7 Posts 3 Posters 801 Views 4 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J Offline
      JT40
      last edited by

      Hello,

      I wonder if there is any tool or any kind of help when you restore the config, but it doesn't succeed due to an error.
      Just imagine I don't know what the error is all about and the support here can't help with it.
      I don't have a simple setup, so a complete configuration from scratch would take me days, including testing...
      As of now, I like to keep screenshots of necessary things, plus a step by step procedure of what needs to be done.

      Tipical scenario: I break my FW, I need to buy a new machine, that new machine has less eth ports, therefore, I think it will fail the restore process.
      I can still read the xml, but it's not comfortable if you need to do everything from scratch manually :D .

      Another interesting fact is that I don't touch the network setup often (even if I should), any knowledge gained are easily faded out with the time...

      JKnottJ 1 Reply Last reply Reply Quote 0
      • JKnottJ Offline
        JKnott @JT40
        last edited by

        @jt40

        All you have to do is download your config and use it when you reinstall.

        PfSense running on Qotom mini PC
        i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
        UniFi AC-Lite access point

        I haven't lost my mind. It's around here...somewhere...

        1 Reply Last reply Reply Quote 0
        • stephenw10S Offline
          stephenw10 Netgate Administrator
          last edited by

          If there are fewer NICs in the new machine you will need re-assign some interfaces when you import the config.
          If you have a mix of subinterfaces, VLANs, PPPs VPNs etc it can be easier to edit the config in advance to use the NIC names in the new hardare.

          Steve

          JKnottJ 1 Reply Last reply Reply Quote 1
          • JKnottJ Offline
            JKnott @stephenw10
            last edited by JKnott

            @stephenw10

            When I changed the computer I run pfsense on, I just used the old config and updated it to account for the different NICs. I also had 4 now, compared to 3 before. Easy enough to do. Even my IPv6 prefix survived.

            PfSense running on Qotom mini PC
            i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
            UniFi AC-Lite access point

            I haven't lost my mind. It's around here...somewhere...

            1 Reply Last reply Reply Quote 0
            • stephenw10S Offline
              stephenw10 Netgate Administrator
              last edited by

              Yeah if you go to hardware with more NICs you just have to re-assign the interfaces to the new names. If the NICs use the same driver you wouldn't even have to do that.

              JKnottJ 1 Reply Last reply Reply Quote 1
              • JKnottJ Offline
                JKnott @stephenw10
                last edited by

                @stephenw10

                The old box had 3 different makes, 1 Intel. The new computer has 4 Intel.

                PfSense running on Qotom mini PC
                i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                UniFi AC-Lite access point

                I haven't lost my mind. It's around here...somewhere...

                1 Reply Last reply Reply Quote 0
                • stephenw10S Offline
                  stephenw10 Netgate Administrator
                  last edited by

                  In most configs you can simply reassign them in the gui and away you go. But you can imagine how that might not be so easy if you have, say, a lagg pair of NICs with VLANs on that and a PPPoE WAN on one of those. 😉
                  Editing the config directly can be easier in that situation. Though it also opens the possibility of user error.

                  Steve

                  1 Reply Last reply Reply Quote 1
                  • First post
                    Last post
                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.