Upgrading from 1100 to 4200

ebcdic

I've ordered a Netgate 4200 to replace my existing 1100. Can I import the XML config file directly or does it need to be converted?

patient0

@ebcdic it needs to be converted since the 1100 got a switch built-in and the 4200 got discreet ports. Netgate will convert it for you, it's part of the Zero-to-Ping service they provide.

Open a support request (https://www.netgate.com/tac-support-request), support level TAC Lite, Problem Category "Configuration - Convertion".

ebcdic

@patient0 Hmm, I had the impression from this comment (the last in the thread) that the opposite was true - it needed a conversion if the new device had the same type of ports, and otherwise it would prompt you.

AndyRH

@ebcdic I have played that game. Went from a 7100 to an 8200, with switch to without. You can reassign the interfaces by hand or have Netgate convert it. The conversion is easier.
They will need to known what ports to assign the networks to, then you load the config.

SteveITS

@ebcdic If pfSense sees the exact same hardware/NIC labels it will just use them.

If it sees any change (i.e. new NIC, missing NIC) it will stop and prompt at the console, or during GUI config import, to assign interfaces.

A challenge with the 1100 is that it has "only one" NIC and uses 3 VLANs to emulate the 3 interfaces, so the VLANs need to be removed from the 3 ports as well.

Netgate TAC is usually very quick about the conversions.

ebcdic

If I send my config file to Netgate for conversion, I should remove any confidential information first. I can see this will include my ISP username/password (for PPPoE), the details of the admin user, and ssh keys. Have I missed anything obvious?

stephenw10

If you edit it first then there's a good chance the result may have some typo. Better to change the details in the converted config after you import it.

But going from a device with a switch to one without can generally be done in in gui when you import it. You can simply reassign, for example, mvneta0.4080 to igc3. Unless you need a bunchof external VLANs or VPN interfaces it should be pretty easy. You can always default the config again and have us convert it if you hit some issue doing it yourself.