configuration cloning
-
Hey everyone, i'm sure this question has been asked and beat to hell numerous times but i can't find the exact answers i'm looking for.
I have two old dell optiplex 790's. both are precisely the same. one is being used as my firewall in one home, the other is going to be repurposed for use as a firewall in my other home.
As i said, they are both precisely the same (same i7-2600k, same quantity of ram, same SSD, and same intel dual port server Nic in addition to the onboard intel nic), and the current pc in service as my firewall is running the latest stable version of pfsense (2.5.X)
Am i to understand that if i backup the xml config to a thumbdrive via the gui, i can install pfsense 2.5.X on the other pc, insert the thumbdrive with the backup config, and it'll restore ALL packages (clamav, squid, pfblocker, suricata, etc..) and their config info?
Does this also include all the codes for subscriptions and tweaks, etc...? what about rules?if i can just plug in the thumbdrive and do a config restore, and once it's done have a 2nd identical machine where all i have to do is literally 'plug it in', that's almost too good to be true!
one thing, i have NO desire to copy dhcp leases or state tables, blah blah.. i just want the packages, their subscriptions, and the tweaks so i don't have to do a side-by-side comparison..
Thanks for your time!
-
You can restore during install or after install via the web GUI (Diagnostics menu). The restore will have you assign interfaces. Everything's in the XML file...you can open it and see.
The "extra data" is the DHCP leases.
-
@steveits That's awesome...
I guess i can 'restore' to an entirely new machine with all new hardware, as long as all the packages are the same..
-
If you restore with packages in the config, it will install the packages. Which can get one in trouble if one is intentionally trying to install an old version of pfSense, because it will try to install packages from the current version (see my sig). I believe it works to install the packages first, then restore.
-
yes, i assumed that. I keep my setup on the latest stable releases of pfsense and packages, so that's not an issue. I'd make sure all were on the latest before doing the config backup and restore.
this is good! saves me a TON of time...
Thanks!