Copy config from a different model Fortigate : Local username/passwords?

Question

Obviously local passwords are encrypted. If you were to copy the config from one model Fortigate I would assume a different model Foritgate won't like those encrypted passwords?

Is it the case that you would have to redo all local username/passwords on the new Fortigate? How does Fortinet do it when upgrading Fortigates with their conversion service?

thanks!

GeorgeZhong · Answer

Hi @genisi ,

The encryption algorithm of different FortiGate model is different, which means we cannot copy the encrypted password string between them. In this case, if we choose to manually copy the configuration, we need to redo all passwords on new FortiGate.

For the FortiConverter service, only the default admin account password will be reset for security purpose. In general, encrypted secret data, credentials, e.g., VPN pre-shared keys, certificates, local users, and admin passwords, will remain valid after cross model migration as long as the FOS version is above 5.6.

Reference:

https://docs.fortinet.com/document/forticonverter-service/25.1.0/online-help/117818/fortigate-configuration-migration

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Authentication-failure-after-migrating-to/ta-p/363183

Regards,

George

Sign up

Login with SSO

Login to the community

Login with SSO

Scanning file for viruses.

This file cannot be downloaded