FortiGate Configuration Import and Backup
When the Fortinet conversion is completed, it will turn into Fortinet import wizard page.
Import Option
After clicking the Import Config, there’re options that allow you to have more flexibility during import.
- If you’re running multi-vdom conversion, UNSELECT the Import "config global" scope objects can prevent overwriting the existing configuration on the device.
- If you don’t want to import the interface, UNSELECT the Import "config system interface" objects can skip the interface objects import.
You can always import the objects to the device individually by selecting after the import process is completed.
Import configuration to the FortiGate
- Click the Import Config button from top-right corner to start the import process.
- During the import process, there is an progress bar and import status for each cli category.
- After imported, please review the import status for every cli category which can be labeled by either one of these tags: Success, Warning, Error, Ignored, Not installed, and Altered.
- For cli objects labeled as "Error", please manually update the CLI commands and then perform selective import by clicking the Import Partial button.
- To review or edit the CLI configuration, please use the CLI Viewer to see the difference between the source and target FGT configurations.
- On the top, the prompt message shows how to manually fix the errors.
- Use the Difference tab from CLI Viewer to see the differences between the source and target configurations. You can also click to copy the source/target configuration.
- Use the CLI Tries tab from CLI Viewer to edit the configurations and then push to FortiGate. Use the drop down list to switch among VDOMs, double click to edit CLI commands, use "+" or "-" to add or delete new lines.
- Use the CLI Notepad tab from CLI Viewer to edit the configurations in text editor mode and then push to FortiGate.
- The "Reviewed" icon represents the CLI object’s review status, simply click the icon to reflect the review status.
The following table explains the supported functions from the config import page.
Tags |
|
---|---|
Success | The CLI successfully installed on the device. |
Warning | There are some commands to be removed or modified in the CLI by the tool not disconnected yet from the device. You can review the item tooltip by moving mouse cursor over the item. |
Error | The CLI failed to import the device. You may want to edit the CLI or manually input to the device. |
Ignored | The CLI is not supported to import by RESTAPI feature. |
Not installed | The CLI is not installed on the device. |
Altered | The CLI has been altered by the user. |
Functionality | |
Export CLI command | Export the CLI commands according to the configuration filtered in search. |
Generate import logs | Download the logs of import. |
Export encrypted password CLI | Export the CLIs with the original encrypted password string, such as users, VPN, Wifi. It could be uploaded to the device directly. |
Push | Import the configuration individually. |
CLI Viewer | Compare the configuration to the target device or edit CLI and push it. |
Sync the device | Sync the configuration on the target device. |
Usability | |
Partial select | Select items and import partially. |
Search by config category | Filter configuration by category. |
Collapse down/up | Collapse or expand the category. |
Review check | Mark the configuration whether it has been reviewed or not. |
Backup configuration from FortiGate
After the import, review and manually adjust, you can choose to get a restorable configuration from the target device and restore it to others.
- Click the Backup Config in the top-right corner of the import wizard.
- Get the restorable configuration.
- Adjust interface settings if needed. (This is to avoid device conflict in the networks.)
- Open the Restore system Configuration and upload the configuration.
- Click OK.