Replace pfSense Community install with Netgate appliance
-
I have a Netgate 2100 on its way to me, and I'd like to know what the process would be to replacing an x86 pfSense firewall installation would be? Is that supported? I don't want to reconfigure all of the firewall settings. Can the existing config, including certificate services, be exported then imported to the new Netgate firewall?
-
J jimp moved this topic from Problems Installing or Upgrading pfSense Software on Feb 25, 2022, 1:56 PM
-
If you only have two interfaces you can just import the config, re-assign WAN and LAN and reboot into it and you're done!
If you have more you will need to configure the switch and VLANs to separate the ports.
https://docs.netgate.com/pfsense/en/latest/solutions/netgate-2100/switch-overview.htmlIf you open a ticket with us we can convert your config directly so it can it just be imported:
https://www.netgate.com/tac-support-requestSteve
-
@stephenw10 Thanks! I don't have a complex config, other than certs from the internal cert authority I would rather not have to replace. Let alone firewall and DNS config I would rather not have to redo. Once I'll submit a ticket later today with the config.
-
You only need to do any manual conversion if you have more than 2 NICs though. Otherwise just import it to the 2100. It will ask you to re-assign the interfaces. Set WAN as mvneta0 and LAN as mvneta1. Done!
Steve
-
@stephenw10 So I just backup all options from the existing firewall to XML format and then import to the new appliance? I don't have more than 2 interfaces configured, and they are the static physical NIC bindings.
-
@stephenw10 Should be final question: My existing pfSenese CE firewall is at 2.5.2-RELEASE, and the 2100+ appliance is as 22.01. Should I update either of them first before attempting to restore from backup?
-
@chrislynch There's no need to. The 2100's newer software will update any config things it has to in order to bring the config up to date.
-
@rcoleman-netgate Thanks! I just completed the replacement and went kinda painless. Outside of cable modem issue, the firewall replacement process was a breeze!