Moving from NetGate 3100 to 4100

[lemur629]

I am replacing a clients NetGate 3100 with a new NetGate 4100. Is there a process or any guidance on moving the configuration file from the 3100 to the 4100?

[Gertjan]

@lemur629

You would thing : I'll export the config from my 3100, and import it into 4100 and done.
But that's a no go.
Nearly everything is the same, except what is shown here :
https://docs.netgate.com/pfsense/en/latest/solutions/sg-3100/io-ports.html

The 3100 has a dedicated WAN port and a dedicated OPT1 port.
And 4 LAN type ports that are actually all switched.

The 4100 is more 'normal' : it has 6 individual ports - no switched ports.

You could try it ; import the config from your 3100 into your 4100, but interfaces would be 'not assigned'.
This also implies that existing firewall rules you defined for your 3100 interface won't get assigned as interfaces don't match.

So : when you receive your 4100, first, upgrade it to 22.05 if that's not already done.
Now export a config, just for backup purposes. this will permit you to go back to a clean state if things go south.
Take note of device ID stuff etc, as these numbers are device depended, and can't be imported in other devices.
Now import your 3100 setup.
Assign and name interfaces.
Re create your firewall rules one by one, using the config.xml file (it is very readable) as a guide.

Things go bad : import the saved 4100 config file.

Btw : this is how I would do it. Tell us how things worked out.

Also : as far as I know, the importation will not recognize your config as a "3100" file, and adapt accordingly to make things work on a 4100.
I hope to be wrong of course ^^

I did shift from a CE 2.6.0 to a 4100 myself.
I finally used to config from my 2.6.0 as a guide to set up my new 4100.
As I was using a boatload of pfSense gadgets, it took me several hours of course.

[stephenw10]

If you don't have the 3100 LAN ports separated then you can just import the config because it will just be 3 interfaces. When you import it into the 4100 the gui will ask you to reassign the WAN, LAN and OPT interfaces and away you go.

If you do have VLANs and switch config etc then that doesn't apply directly on the 4100. You can can still import it but you would end up with some invalid VLAN interfaces to clean up.

Steve

[lemur629]

Sorry I have not updated. I have not been able to get back to the firewall yet, but I am hoping to soon.