FortiSwitch Migration Tool (fortilinkify.py)

[Dan_Eng52]

Hi all, 

I hope you're well. 

I currently have 4 x FortiSwitch and 4 x FortiAP devices being managed via FortiLAN but am in the process of deploying HA cluster 90G's. Because we will now have FortiGate's in place, I would like to move our FortiSwitches and FortiAP devices from FortiLAN to FG managed but rather than manually import configuration I would like to use the fortilinkify.py script. 

I have downloaded the script and have reviewed documentation available on the FNDN site however, it isn't very detailed and doesn't explain how to carry out the entire process. Can anyone with experience of using the migration tool be of assistance or provide me with a better way to automate this instead of manually pasting configuration? 

Thanks, 

Dan. 

[Dan_Eng52]

@Anthony_E would you be able to find someone who can provide some guidance! Thanks in advance. 

[Anthony_E]

Hello Dan,

Sure, Let me investigate :)!

Regards,

[Dan_Eng52]

Hi Anthony, 

Thank you very much. 

I carried this out as I usually would by replacing the config-version, conf_file_ver, buildno, and global_vdom from the new firewall. Then, paste and replace these lines in the backup of the previous configuration file. 

However, if you could find some more information on how to carry this out with the fortilinkift.py script that would be great as I would like to know how to do it this way. 

Regards,
Dan.

[Anthony_E]

Hello @sachitdas_FTNT,

Maybe you have an idea concerning the Dan question?

Thanks a lot in advance!

Regards,

[Anthony_E]

Hi @AEK, @ozkanaltas,

Do you maybe have an idea concerning the Dan question?

Thanks a lot in advance.

Regards,

[AEK]

Hello Dan

I didn't use this tool before but I can see that the documentation "FSW Config Migration.pdf" is clear and some migrations examples are provided.

E.g.:

$ ./fortilinkify.py -o switch.cfg port2 myswith.conf

Where:

• switch.cfg is the output config file
• port2 is the FortiLink interface
• myswitch.conf is your current standalone switch configuration

Then you import the output config file to your FortiGate:

FGT # execute restore script tftp switch.cfg 192.168.41.1

Did you get any error when you tried the conversion on when you import it to FGT?

[Dan_Eng52]

Hi AEK, 

I hope you're well. 

Thanks for your response, I understand the execution of the script to the FortiGate as below:

FGT # execute restore script tftp switch.cfg 192.168.41.1  

However, my main issue has been understanding how I use the script and use my switch .conf files as inputs to generate a final, complete configuration for me to restore on my FortiGate. Essentially, once I have downloaded the fortilinkify.py script from FNDN what steps from that point do I have to carry out. 

I hope that makes sense. 

Regards, 

Dan.

[Dan_Eng52]

Hi AEK, 

I have an ubuntu desktop on a server and I have managed to run the script to get a firewall configuration to apply. I will try and restore this script using the below and will see if this is applied succesfully. 

FGT # execute restore script tftp switch.cfg 192.168.41.1 

Regards, 

Dan. 

[ozkanaltas]

Hello @Dan_Eng52 ,

You can also upload this script file via GUI.

https://docs.fortinet.com/document/fortigate/7.6.0/administration-guide/780930/configuration-scripts