topic Re: Migration from Physical to VM series firewall in General Topics

Migration from Physical to VM series firewall

deepak12 — Thu, 07 Jan 2021 12:33:04 GMT

Hi All ,

We are planning to move from on-premises to cloud .

Currently we are having physical devices and we are checking possibilities how we can migrate to VM series firewall ?

Do we need to do config manually ? or is there anyway we can export/import the config .If yes.. will it rake care pre-shared keys as well ?

Re: Migration from Physical to VM series firewall

reaper — Thu, 07 Jan 2021 13:56:51 GMT

you can export the named configuration file and import it into a VM.

your main concern will be making sure the interfaces line up, theIP addresses are set correctly (for dataplane and mgmt interfaces), and the NAT rules are set properly

Re: Migration from Physical to VM series firewall

deepak12 — Thu, 07 Jan 2021 14:11:19 GMT

@reaper ,

Thanks for your help.

Just want to confirm for pre-shared keys..

So these also will be taken care during export/import to vm or do we need to manually configure it again after import.

Re: Migration from Physical to VM series firewall

BPry — Thu, 07 Jan 2021 19:27:59 GMT

@deepak12,

If you set the master key to the same value as you have on your physical equipment, the pre-shared will be perfectly fine following the import. If you don't know your current master key, the phash and pre-shared-key values will need to be updated before you do a commit as they won't match what you are expecting anymore.

Re: Migration from Physical to VM series firewall

reaper — Thu, 07 Jan 2021 19:50:33 GMT

The ipsec preshared keys, certs and password hashes will come along, if you're talking about the master key, as @BPry mentioned; you'll need to input the correct password for the config hashes to be decrypted properly

Re: Migration from Physical to VM series firewall

deepak12 — Fri, 08 Jan 2021 20:34:10 GMT

@reaper @BPry ,

Thanks a lot for your help .

Thanks..