Migrating a configuration with FortiConverter

A configuration can be migrated from an older FortiGate device to a new FortiGate device directly from the FortiGate GUI, without having to access the FortiConverter portal.

Both the source and target FortiGates must be registered under the same FortiCare account and have internet connectivity to reach the FortiConverter server. The target FortiGate must also have a valid FortiConverter license.

In this example, FortiGate A (FGTA) is replacing FortiGate B (FGTB). The configuration is migrated using FortiConverter, but without accessing the FortiConverter portal.

To migrate the configuration from FGTB to FGTA in the GUI:

1. On FGTB, go to System > Settings, enable Allow FortiConverter to obtain config file once, then click Apply.

   

2. Log in to FGTA and on the GUI startup menu click Begin to start Migrate Config with FortiConverter.

   

3. Click Convert to start the conversion process.

   If the device does not have a FortiConverter license, a warning will be shown and the Convert button will be unclickable. The license status is shown in the GUI on the System > FortiGuard page in the License Information table.

   

   You can toggle the Don't show again option and click Later to turn off reminders about the migration process.

4. Enter the user contact information, then click Save and continue.

   

   The FortiConverter ticket is created.

5. The source configuration can be uploaded from a file, or from another FortiGate. In this example, the configuration is uploaded from FGTB.

   • To upload from a file, set Source config to Upload then click Browse to locate the file.

     

   • To import from FGTB, set Source config to Import from source FortiGate then select the FGTB. Allow FortiConverter to obtain config file once must be enabled in System > Settings on FGTB.

     

6. Click Save and continue, then wait for the FGTB configuration file to be uploaded to FortiConverter and processed. After the configuration is uploaded, the Allow FortiConverter to obtain config file once is automatically disabled on FGTB.

   

7. Define the interface mapping between the source and target configuration, then click Save and continue. The target interfaces are prepopulated.

   

8. Optionally, configure management access on the target FortiGate (FGTA), then click Save and continue.

   

9. Enter conversion notes in the Comments field, then click Save and continue.

   

10. Review the content, then click Submit.

    

    The conversion request is sent, an email is sent to confirm that the conversion process has started in FortiConverter, and the ticket status is shown. The estimated conversion time is one business day.

    

11. Click Done.

    When the conversion process completes, you will receive an email and a notifications in the FortiGate GUI.

12. In the GUI, click your administrator name and select Configurations> FortiConverter. The migrated configuration is shown for review, and can be downloaded.

    

13. Click Apply migrated config to apply the converted configuration to the FortiGate. This will cause the FortiGate to reboot. The existing configuration will be backed up before the converted configuration is applied.

14. To manually load to configuration file:

    1. Click your administrator name and select Configuration > Restore.

       

    2. Upload the converted configuration file, then click OK. This will cause the FortiGate to reboot.

To see the visibility status of the FortiConverter wizard:

diagnose sys forticonverter get-prompt-visibility

To set the visibility status of the FortiConverter wizard:

diagnose sys forticonverter set-prompt-visibility {visible | hidden}