Any SonicWall gurus?

DeaconFrost

DeaconFrost

[H]F Junkie
2FA
Joined
Sep 6, 2007
Messages
11,610
I just ordered a TZ 100 to replace the old TZ 170 that my company has been using before I started. My question is this: Do they offer some kind of export utility, where I could quickly, and easily pull out the configuration and import it into the new TZ 100, so my downtime would be fairly quick?
 
I'm not sure if there are differences between the TZ 170 and the TZ 100, making the export/import not work correctly, but this is what I have on my NSA 2400:

capturefdf.jpg


I would think you would be OK - do they run the same firmware?

 
ciggwin said:
I'm not sure if there are differences between the TZ 170 and the TZ 100, making the export/import not work correctly, but this is what I have on my NSA 2400:

capturefdf.jpg


I would think you would be OK - do they run the same firmware?

Click to expand...

the 170 uses 3.1.x and the 100 uses 5.x and up.

I'm just looking up the matrix, will post for you in a bit.
 
Screen%20shot%202011-03-23%20at%203.35.02%20PM.png


It really depends on your current firmware, if it is less than 5.x. Interface x2 will be dmz.
 
I actually have the new router on my desk now, so I figured I'd re-up this with more details.

My current TZ 170 is running SonicOS Standard 3.0.0.1-28s (SonicROM 2.6.0.0) if that helps or matters. I'm not sure what the TZ 100 is running, but it is brand new out of the box.

I don't have any site-to-site VPNs configured. I am not even using the wireless on the 170. What is most important, is any other customizations I may not be aware of, and a bunch of port-forwarding and firewall access rules I have configured.
 
The TZ100 is probably running the enhanced OS. Seems like all the new stuff is running Enhanced OS. Not sure if you can import standard settings to enhanced. Fortunately it should be pretty easy to check all the settings in standard OS. If you ever have to setup a VPN connection you'll find Enhanced OS a lot different than standard. Also another tip. Use the wizard in the top right corner if you ever need to setup a public server. Works great and will save a lot of headaches. First order of business will be to update the firmware in the new device.
 
Last edited:
I just confirmed with SonicWall support that my two routers aren't compatible, in terms of using an export file, so it look as though I'll be manually configuring the new router. I'm sure this will be tedious, but if it works, great.
 
Probably the biggest headaches with the enhanced OS is any location or item you have to setup first as an address object under the network category. The other hassle is the NAT policies. If you can use the wizard for setting up anything it will create the NAT policies for you.
 
Thanks! If you want to do the data entry for me so I can grab a mid-morning nap, that would be great. :)
 
Create a TSR report from the TZ170 and save it to your pc. You can open it up and read it to go over all the settings to be sure you don't miss something.
 
In my experience, avoid the headaches later and configure manually now. There is to much of a version change there. I have had weird objects get stuck in the GUI that I could only get out in the CLI.
 
I have a few options for a TSR Report, but none of them seem to be relevent to the settings:

tsrreport.jpg
 
Normally you'd check all boxes if you were sending that report to Sonicwall. I would go ahead and check them all. Might as well have all the info in front of you. There will be a lot of needless info for your situation, but at least you'll have it all.
 
too bad the export and import won't work for you, I went from a TZ100W to a TZ200 and the settings exported and imported ok, been up for over a week now with no issues. I was dreading have to configure it all again.
 
I know I'm going to miss something here and there. Good thing the old router is staying on the wall for now, so I can quickly swap the cables back, if needed.
 
I'm platinum certified in throwing SonicWALL appliances into the trash can. :)

Actually I have 4 x TZ190's in production still and a TZ170 in a box. :(
 
MikeTrike said:
I'm platinum certified in throwing SonicWALL appliances into the trash can. :)

Actually I have 4 x TZ190's in production still and a TZ170 in a box. :(
Click to expand...

i miss my tz210 :(

i have a 170 in a box collecting dust too :)
 
You must log in or register to reply here.
Back
Top