Upgrade (restore config) from C2758 (with expansion card) to XG-7100 not working



  • I'm trying to upgrade my two C2758 (with expansion cards [so 8 ports total]) to the new XG-7100.

    I've made sure my C2758's have all the latest firmware installed (2.4.3-RELEASE (amd64)).
    The XG-7100's are also running (2.4.3-RELEASE (amd64)).

    When I try to restore my backups (tried with with and without RRD data) that were made from my C2758's to the new XG-7100 it seems like some of the interfaces disappear and I can't assign my interface names to the correct/all of the interfaces that should be (and previously were) there.

    After I restore I'm only given the options to assign to interfaces: (ix0 ix1 ix2 ix3 igb4.100 igb4.2 a or nothing).

    On my C2758's my assignments were:
    igb0 (one of my wans)
    igb2 (another of my wans)
    igb3 (yet another wan)
    igb4 (LAN)
    igb5 (another lan)
    and then
    VLAN 100 on igb4
    VLAN 2 on igb4

    Can I not do a backup/restore across the models?
    Is this a bug?
    Do I just need to backup everything else individually and then restore individually except for the interfaces?

    Thanks for the help.



  • Sigh, this is not a bug.

    How should an install know which old interface to replace with which new one?
    You can do so with a text editor (neither Wordpad nor Word and the like qualify) and edit your backed-up config.xml

    Replace each occurence of igb0 with where you want "one of your wan interfaces" to be now. ix0 or what have you.
    Repeat for all others. Upload. Done.

    OR reassign via console. This hasn't worked flawlessly for me in the past when VLANs were configured so I try to avoid it.



  • Well, my issue isn't that the interfaces aren't automatically reassigning themselves.  I don't expect them to do that.

    It's that on the XG-7100 I see I have two IX ports and 8 ETH ports… but when I look at the the interfaces through the console I see this:


    On an unconfigured XG-7100:
    –--------------------------------------------

    Valid interfaces are:
    
    ix0     [mac] (down) Intel(R) PRO/10GbE PCI-Express Network Driver,
    ix1     [mac] (down) Intel(R) PRO/10GbE PCI-Express Network Driver,
    ix2     [mac] (down) Intel(R) PRO/10GbE PCI-Express Network Driver,
    ix3     [mac] (down) Intel(R) PRO/10GbE PCI-Express Network Driver,
    
    ...
    
    VLAN interfaces:
    
    lagg0.4090      VLAN tag 4090, parent interface lagg0
    lagg0.4091      VLAN tag 4091, parent interface lagg0
    
    ...
    
    Enter the WAN interface name or 'a' for auto-detection 
    (ix0 ix1 ix2 ix3 lagg0.4090 lagg0.4091 or a):
    
    

    –-------------------------------------------------------------------------------
    On the XG-7100 after I restore my config (from the C2758) to it:

    Valid interfaces are:
    
    ix0     [mac] (down) Intel(R) PRO/10GbE PCI-Express Network Driver,
    ix1     [mac] (down) Intel(R) PRO/10GbE PCI-Express Network Driver,
    ix2     [mac]   (up) Intel(R) PRO/10GbE PCI-Express Network Driver,
    ix3     [mac]   (up) Intel(R) PRO/10GbE PCI-Express Network Driver,
    ovpns1  ovpns1 (down) 
    
    ...
    
    VLAN interfaces:
    
    igb4.100        VLAN tag 100, parent interface igb4
    igb4.2          VLAN tag 2, parent interface igb4
    
    ...
    
    Enter the WAN interface name or 'a' for auto-detection 
    (ix0 ix1 ix2 ix3 ovpns1 igb4.100 igb4.2 or a):
    
    

    –--------------------------------------------------------------
    But then back on my C2758 I see these interfaces:

    igb0 [mac] (down) Intel(R) PRO/1000 Network Connection, Vers
    igb1 [mac] (down) Intel(R) PRO/1000 Network Connection, Vers
    igb2 [mac] (down) Intel(R) PRO/1000 Network Connection, Vers
    igb3 [mac] (down) Intel(R) PRO/1000 Network Connection, Vers
    igb4 [mac] (down) Intel(R) PRO/1000 Network Connection, Vers
    igb5 [mac] (down) Intel(R) PRO/1000 Network Connection, Vers
    igb6 [mac] (down) Intel(R) PRO/1000 Network Connection, Vers
    igb7 [mac] (down) Intel(R) PRO/1000 Network Connection, Vers
    

    So I'm just confused with HOW I'm supposed to re-write them after restore because it looks like the WAN and LAN interfaces are now done as VLANS?

    So how do I best go about reassigning all my previous physical adapters as now VLANS?

    Looking at the XG-7100 through the web interface I'm seeing only one "LAGG0 (UPLINK)" as an assignable interface…
    And in the console I'm not given that as an interface option.

    I'm just super confused on how to do the interfaces on this piece of hardware.



  • @soteriologist:

    The XG-7100's are also running (2.4.3-RELEASE (amd64)).

    Did you download the Community Edition (CE) of pfSense or the factory version?
    After you register your device with netgate you can download that version from their portal.

    The CE version does not have required drivers for your hardware.

    @https://forum.pfsense.org/index.php?topic=146088.msg794347#msg794347:

    C3000 NIC support (factory installations only)
    C3000 SoC support (factory installations only)
    Marvell 88E6190 switch support (factory installations only)



  • I haven't downloaded or installed any version of pfsense myself for my Netgate boxes.  I've only used the stock firmware that came with them.  To get everything back to stock on the XG-7100 I'm just using the console to "Reset to factory defaults" and that's when the lagg0.4090 (WAN) and lagg0.4091 (LAN) reappear.

    And to confirm: those VLAN ports do work, and I can get to the web gui by connecting to the ETH1 port on XG-7100.  That's how I'm restoring my config to the box, but then once I do that lagg0.4090 and lagg0.4091 go away.  Which, I understand why they're going away (because they're a VLAN and wiped out by my config)… but then how am I supposed to get access to this box if I'm not given access to the physical ETH1-8 ports on it to assign to things?



  • I'd open a support ticket with netgate now if you don't want to install the current 2.4.3 factory image from their web-site and see how that works.



  • Roger, Roger.

    I've opened a ticket with them.

    I'll update on here with what happens.



  • I case you haven't figured it out by now I ran into the same issue.  When you restore you lose the LAGG interface in the Interfaces section.  You need to recreate this and assign it to ix2 and ix3 with the LOADBALANCE option.  You then add your VLANS if you have any and assign all your interfaces to the LAGG as documented in their setup guide.  In the setup guide it mentions to NEVER DELETE THE LAGG INTERFACE!  But when you restore the configuration it overwrites that because your old setup didn't have it.  Hope that helps!



  • Ya, sorry.  I just closed my support ticket with them last week and it's exactly this.

    We just re-wrote everything into the config file manually and then installed the edited version of the config and it worked perfectly.



  • You don't happen to have a copy of your config you can post for those that are having problems configuring the device? Of course, with all the passwords, info sanitised.

    Thanks; a struggling user.



  • Hi, i have the exatly same problem at the moment.

    I'm switching from a homebuilt (not by me) machine with 2 interfaces (WAN and LAN) to a brand new XG-7100.
    I tried to restore, but i can only choose between ix0, ix1, ix2, ix3 and ovpns1, none of these are my ETH ports.

    Is it enough to replace the data in the interfaces section, in the backup file, with the data from the interfaces section from the new firewall?

    Here are the sections from backup files:

    Old firewall:

    • <interfaces>- <wan><enable><if>em0</if>
      <blockpriv><blockbogons>-
      <alias-address><alias-subnet>32</alias-subnet>
      <spoofmac><ipaddr>dhcp</ipaddr>
      <dhcphostname><dhcprejectfrom><adv_dhcp_pt_timeout><adv_dhcp_pt_retry><adv_dhcp_pt_select_timeout><adv_dhcp_pt_reboot><adv_dhcp_pt_backoff_cutoff><adv_dhcp_pt_initial_interval><adv_dhcp_pt_values>SavedCfg</adv_dhcp_pt_values>
      <adv_dhcp_send_options><adv_dhcp_request_options><adv_dhcp_required_options><adv_dhcp_option_modifiers><adv_dhcp_config_advanced><adv_dhcp_config_file_override><adv_dhcp_config_file_override_path><ipaddrv6>dhcp6</ipaddrv6>
      <dhcp6-duid><dhcp6-ia-pd-len>0</dhcp6-ia-pd-len></dhcp6-duid></adv_dhcp_config_file_override_path></adv_dhcp_config_file_override></adv_dhcp_config_advanced></adv_dhcp_option_modifiers></adv_dhcp_required_options></adv_dhcp_request_options></adv_dhcp_send_options></adv_dhcp_pt_initial_interval></adv_dhcp_pt_backoff_cutoff></adv_dhcp_pt_reboot></adv_dhcp_pt_select_timeout></adv_dhcp_pt_retry></adv_dhcp_pt_timeout></dhcprejectfrom></dhcphostname></spoofmac></alias-address></blockbogons></blockpriv></enable></wan>
    • <lan><enable><if>em1</if>

    <ipaddr>192.168.200.1</ipaddr>
    <subnet>24</subnet>
    <spoofmac></spoofmac></enable></lan></interfaces>

    New firewall: (XG-7100)

    • <interfaces>- <wan><enable><if>lagg0.4090</if>
      <ipaddr>dhcp</ipaddr>
      <ipaddrv6>dhcp6</ipaddrv6>
      <gateway><blockpriv>on</blockpriv>
      <blockbogons>on</blockbogons>
      <media><mediaopt><dhcp6-duid><dhcp6-ia-pd-len>0</dhcp6-ia-pd-len></dhcp6-duid></mediaopt></media></gateway></enable></wan>
    • <lan><enable><if>lagg0.4091</if>
      <ipaddr>192.168.200.1</ipaddr>
      <subnet>24</subnet>
      <ipaddrv6>track6</ipaddrv6>
      <subnetv6>64</subnetv6>
      <media><mediaopt><track6-interface>wan</track6-interface>
      <track6-prefix-id>0</track6-prefix-id></mediaopt></media></enable></lan>
    • <opt1><if>ix0</if>
      -</opt1>
    • <opt2><if>ix1</if>
      -</opt2></interfaces>