Skip to main content
phensley
phensley
New Member
April 15, 2022
Question

Moving config from FGT VM64-KVM to FGT 80F

  • April 15, 2022
  • 2 replies
  • 2228 views

I was wondering if anyone has any recommendations with migrating config between Fortigate devices? We currently lease Fortigate VM64-KVM's from AT&T but decided to buy 80F's to save money from leasing. Exporting the config from the old to the new does not work, and is not supported apparently except with the FortiConverter tool. I downloaded the trial and was able to import the VM64 config, and have it connect to the new device successfully and it threw up a bunch of red flags about port names not matching and what not. I know it's not the fully licensed version, but wasn't sure if buying it would even work.

 

Does anyone have any experience or advice in this?

2 replies

Markus_M
Staff & Editor
Markus_M
Staff & Editor
April 15, 2022

Hello,

 

the converter should work just fine.

If your configuration is not complicated, you can also see to do some copy&paste of parts of a backup configuration from top to bottom of needed parts. Interface names will be different but for example an LDAP configuration can be copy and pasted as is, as well as the referencing user/groups.

You will mostly need to make sure that your interfaces are made and set correctly to whatever their purpose is.

On the 80F you might have an internal switch that the VM might not have, so you want to remove it prior to doing anything with the 80F configuration.

 

Best regards,

 

Markus

phensley
phensleyAuthor
New Member
April 15, 2022

 

 

Thanks for your reply Markus. This is where the Converter tool stops, with the text in red and I'm not sure why. Someone else originally configured these years ago for us

 

IMG_6485.jpg

Markus_M
Staff & Editor
Markus_M
Staff & Editor
April 16, 2022

Hello,

 

This looks like the original configuration had VLANs in it, VLAN 4001, VLAN 200.

You basically convert the configuration in a way that says:

- This is the source firewall with these ports that have some specific use (port1=wan, port2=server, port3=dmz,...etc).

- This is the destination firewall with these other ports with no defined use.

 

You will need to map what use these ports on the new firewall will have.

That means you will have to understand the intention of these VLANs in order to map them correctly.

 

Best regards,

 

Markus

Terms & ConditionsAccessibility statement