Downgrading Pfsense Netgate SG-3100 from 20.XX to 2.4.5.p1

s0m3f00l

These steps attempt to explain downgrading the Netgate SG-3100 from 20.XX to 2.4.5.p1 I had to do this after testing 20.05 + the patch and wanted to write it down for the next test, if any.... enjoy:

Download the official 2.4.5.p1 software and image to a USB
Download a backup of the configuration file from the device you are restoring . Or use a verified backup from your elite backup plan.
Reinistall Pfsense with the steps outlined in the documentation
Enter the web configurator @192.168.1.1 and restore the config
note: I tried the config.xml usb method and it was unsuccessful
During the config restoration reboot, interrupt the loader by pressing any key other than enter after the loader prompt and login to single user mode. Outlined in a video by netgate and not in the docs.
Remove the package sync hold so that you don't install the new version BD system packages that will error and cause weird issues on the device.

# mount -a 
# rm /conf/needs_package_sync
# exit

Log into the webconfigurator and change branch to 2.4.5.p1 in
System / Update / Update Settings
Reinstall the packages manually and one at a time in package manager.

This process wasn't straightforward at first but after much hand wringing and teeth gnashing through failed attempts for a myriad of different reasons this seems to be the way you can move through it with as few face punches as possible. Maybe this will help people with testing in ease or maybe not. I won't lie and say it was fun. Also note, even after this, I had to completely remove PFBLOCKERNG-Dev and its settings then reinstall to get it all back to normal.

Also, I think that's everything, But let me know if you see any glaring errors

Good Luck

stephenw10

If you need to do this you should use a config from the version you are re-installing or earlier.
A config file from 21.05 uses a different config version that 2.4.5p1 for example and that can cause problems.
https://docs.netgate.com/pfsense/en/latest/releases/versions.html

An alternative to booting into single user mode is just to disconnect the WAN for the first boot after the restore and wait for the package re-install to fail.

Steve

s0m3f00l

@stephenw10 said in [Downgrading Pfsense Netgate SG-3100 from 20.XX to 2.4.5.p1](/post/

An alternative to booting into single user mode is just to disconnect the WAN for the first boot after the restore and wait for the package re-install to fail.

Problem I had with this was some of the packages would freeze up the whole process waiting for the version. And clearing the package lock won't help once you plug in the old WAN pfsense eagerly moves forward with some of the system packages. It seemed way faster to hit single user and be done with it but YMMV.