Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    2.5.0 how to transfer config to another machine

    General pfSense Questions
    2
    8
    114
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • F
      f.meunier last edited by

      Hello all
      pfSense v2.5.0
      I want to migrate a pfsense config to a new (recent) machine. The new one has a different architecture (cpu, interfaces names)
      I exported (backup) the actual .xml config file, then modified :

      • the interfaces names,
      • reverted webgui protocol to http

      and imported it in the new machine with a fresh 2.5.0 install (in a testbed separated network)
      It boots, but the GUI is stuck on logon page. If admin password is incorrect, I clearly get a "Username or Password incorrect" message, but using the correct credentials, the logon screen clears the fields and does nothing. SSH is OK.

      I even get " /index.php: Successful login for user 'admin' " messages in the ssh console.

      I suspect a certs issue, but I don't know how to "reset" or switch to standard (webconfigurator) certs without using "reset to factory default".

      I tried " pfSsh.php playback generateguicert" but still no success.

      JKnott 1 Reply Last reply Reply Quote 0
      • F
        f.meunier last edited by f.meunier

        [edit]
        I switched to another browser (from firefox to edge) -> I managed to get in !
        I changed the password
        I changed the wan interface IP to connect to the outside ("Packages Reinstallation" occurred)
        I switch back to https
        reset WebGUI cert with "pfSsh.php playback generateguicert"
        -> now I can connect to GUI witch HTTPS

        Cert Authorities (CA) are correct. I have one internal CA and one "Acmecert Let's Encrypt"

        When I check the certs in "System / Certificate Manager / Certificates" there is an error in webConfigurator default
        seems that pfsense had a crash recovered : "[01-Mar-2021 15:56:02 Europe/Paris] PHP Fatal error: Uncaught Exception: DateTime::__construct(): Failed to parse time string (@) at position 0 (@): Unexpected character in /etc/inc/certs.inc:712"
        ... and I can't generate additionnal Certs : no button available
        Capture d’écran 2021-03-01 160439.png

        1 Reply Last reply Reply Quote 0
        • JKnott
          JKnott @f.meunier last edited by

          @f-meunier

          I copied the config from my old HP computer to my new Qotom a few weeks ago. It was very easy and only required a couple of minor tweeks. I copied the file directly from the old hard drive to a USB stick to the new drive. However, you can use the backup & restore functions too.

          F 1 Reply Last reply Reply Quote 0
          • F
            f.meunier @JKnott last edited by

            @jknott
            Hello
            That is what I was expecting on my side, but it did not behave as planned.

            Did you transfer from v2.4.5 or 2.5.0 ?

            JKnott 1 Reply Last reply Reply Quote 0
            • JKnott
              JKnott @f.meunier last edited by JKnott

              @f-meunier

              2.4.5 > 2.4.5

              F 1 Reply Last reply Reply Quote 0
              • F
                f.meunier @JKnott last edited by

                @jknott
                I agree, it works for 2.4.5, but not for 2.5.0
                I can confirm transferring leads to a certificate corruption problem, and I'm wondering how I can "reset" or "clear" the certs, to start over cleanly.

                JKnott 1 Reply Last reply Reply Quote 0
                • JKnott
                  JKnott @f.meunier last edited by

                  @f-meunier

                  Why not install to 2.4.5 and then update to 2.5.0?

                  F 1 Reply Last reply Reply Quote 0
                  • F
                    f.meunier @JKnott last edited by

                    @jknott
                    I already migrated the "source" machine to v2.5.0 and found a cert corruption issue + dns issue.

                    I had to redo the whole config on the new machine. However, it offered me the opportunity to "clean up" the whole config ;-)

                    I want to keep the old machine as a spare one eventually (even if not kept up to date) , so I'm looking for a 2.5.0 -> 2.5.0 transfer procedure.

                    1 Reply Last reply Reply Quote 0
                    • First post
                      Last post

                    Products

                    • Platform Overview
                    • TNSR
                    • pfSense
                    • Appliances

                    Services

                    • Training
                    • Professional Services

                    Support

                    • Subscription Plans
                    • Contact Support
                    • Product Lifecycle
                    • Documentation

                    News

                    • Media Coverage
                    • Press
                    • Events

                    Resources

                    • Blog
                    • FAQ
                    • Find a Partner
                    • Resource Library
                    • Security Information

                    Company

                    • About Us
                    • Careers
                    • Partners
                    • Contact Us
                    • Legal
                    Our Mission

                    We provide leading-edge network security at a fair price - regardless of organizational size or network sophistication. We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

                    Subscribe to our Newsletter

                    Product information, software announcements, and special offers. See our newsletter archive to sign up for future newsletters and to read past announcements.

                    © 2021 Rubicon Communications, LLC | Privacy Policy