pfsense ce config transfer to netgate 2100 applicance with pfsense plus software
-
hi all,
we are going to attempt this in the lab. But just wanted to know if you can transfer a backup file from a custom built pfsense ce box to a netgate appliance.
we have transferred individual configs before e.g. aliases.
-
You will likely experience some issues unless you hand-edit the config because the SG-2100 has a Marvel Ethernet switch inside that has to be properly configured, especially if you want each port to be an independent isolated interface. See the docs here: https://docs.netgate.com/pfsense/en/latest/solutions/netgate-2100/configuring-the-switch-ports.html. Note that your interfaces will have new names on the SG-2100 because the NIC drivers are different.
I believe the Netgate support team can help with the migration if you open a TAC Lite request with them here: https://www.netgate.com/tac-support-request. I am also tagging @stephenw10 because he is the Netgate hardware guru.
-
The switch in the 2100 doesn't have to be configured (unlike the 1100).
If there is no switch config in the imported config file it will just default to port based VLAN mode, like an unmanaged switch, and pass the mvneta1 traffic to all ports.
So if your custom appliance only had two NICs then you can import it directly and just re-assign WAN and LAN as mvneta0 and mvneta1.If you had more NICs and need to use the 2100 LAN ports discretely then, yes, you would need to add switch setup.
We can convert your config directly if you open a ticket: https://www.netgate.com/tac-support-request
No need to have any sort of subscription for that.Steve
-
@stephenw10 A related Q: 3100 to 2100 migration?
-
Both those use mvneta NICs but the assignment is different and the 3100 has 3. So if you have to be careful just importing it directly because it's possible it might just accept it if you only had 2 NICs assigned. It's unlikely though since the WAN in the 3100 is mvneta2 by default and since that doesn't exist on the 2100 it will ask you to reassign the NICs.
On both devices the switch is on mvneta1 and the switch itself is the same so config would still be valid.So for most configs you would only need to reassign WAN from mvneta2 in the 3100 to mvneta0 in the 2100. If you are using the OPT interface you would need to remove that or reassign it as a VLAN.
-
-
@stephenw10 Got it, saving all this this time, so I stop asking and can keep them straight. :) We'll have several client 3100s to move to 2100s or 4100s.