SRX

 View Only

IMPORTANT MODERATION NOTICE

This community is currently under full moderation, meaning  all posts will be reviewed before appearing in the community. Please expect a brief delay—there is no need to post multiple times. If your post is rejected, you'll receive an email outlining the reason(s). We've implemented full moderation to control spam. Thank you for your patience and participation.



  • 1.  Migrating SRX100H2 to SRX300

    Posted 04-26-2018 02:34

    I have a really old SRX100H2 firewall. I would like to migrate to SRX300.

    Is the migration as easy as exporting and importing the config?

     

    Some migration tips would help greatly.

     

    Thank you very much.


    #srx300
    #import
    #Migration
    #Export
    #SRX100H2


  • 2.  RE: Migrating SRX100H2 to SRX300

     
    Posted 04-26-2018 03:06

    Unfortunately you cannot copy the configuration there are a number of differences.

     

    1-SRX100 is fe interfaces and the SRX300 series are ge interface

    2-there is a major change in how layer 2 configurations work.  Junos has merged the MX version of layer 2 into the SRX chain.  The new system is called ELS (enhanced layer 2 services).  Here is the documentation on getting started with the changes.

     

    https://www.juniper.net/documentation/en_US/junos12.3/information-products/topic-collections/ex9200/software-all/getting-started-els.pdf

     



  • 3.  RE: Migrating SRX100H2 to SRX300

    Posted 04-26-2018 03:12

    Thanks for the guide. To simplify it further, do I use the ELS translator tool to translate my old configuration, from there, manually checked if the translated configuration is correct?



  • 4.  RE: Migrating SRX100H2 to SRX300
    Best Answer

     
    Posted 04-26-2018 17:28

    Yes that would work.  I didn't mention the ELS translator because I was not able to reach it and wasn't sure if that was just a permission change or if the tool was no longer public.

     

    Also note the interface name changes across all services in the configuration as well.