About mthompson

Here is a quick update. I decided to downgrade the new units to 5.0.8 and then copy the config onto them. This way I did not have make any changes to production. Much easier not having to go through change controle and waiting for change windows and such.   Once I got the current config on them running 5.0.8, I modified a couple things like the interface differenced between the two appliances. then I upgraded the new ones to 6.1.8.    I brought them into production for 1 hour late last night just to identify any issues or things I've overlooked. I had forgotten to assign a virtual router to a new interface, other than that most things worked fine.  One thing I think is not working is the single site to site VPN we have with a vendor we use. I have compared the configs and the settings are the same, so I'll have to work on this.    I'll be bringing this new boxes permenantly into production next week.    Thanks again for the direction and information. ... View more

I had read in a migration doc that the config could only be transfered between devices as long as two conditions were met. One was same code version. The other was same hardware model. You both are saying that the hardware model does not need to be the same. If that's the case it will certainly make this easier.    I think I'll upgrade the 2050's to 6.1.4. - copy off the config and import it onto the 3050's. If the 2050's are stable after the upgrade I'll leave them at 6.1.4. If not, I'll roll them back.   Thanks for the thoughts and directions. I'll post the results.   mthompson ... View more

Thanks both of you for the information and ideas. I'm going to put this in tonight. ... View more

mikand, Thanks. That looks good. I have a couple questions? Wouldn't I want to make the dstip: in #2) 192.168.0.0/16 so it would only block private ips? Or am I reading this wrong? Also, I mostly use the GUI for configuration. Where would I put this in? Michael ... View more