Exporting and Importing configuration

[leon84]

Hi to all,

I exported configuration from a Fortigate 60c ( firmware 5.2.0) and I tried to import it on another Fortigate 60c (firmware 5.2.1) but some configuration like VIP and policy are not transferred on second router. 

I also tried to downgrade second router at the same firmware (5.2.0), uploaded configuration (correctly), but when I upgrade to firmware 5.2.1 I always lost VIP and some policy. The same problem I have with firmware 5.2.2, 5.2.3 and 5.2.4. 

Can you help me? 

[rwpatterson]

I'm not sure why that's happening, but did you try to paste the missing portions into the CLI on the second unit to see what happens?

[Toshi_Esumi]

I don't have a 60C but 60Ds so things might be slightly different. But with any FG models I wouldn't trust any config compatibility between minor versions. So I recommend you default the second 60C and downgrade to 5.2.0 to be the same with the first one. Then you copy the config and upgrade the second 60C to whatever you want to run with.

[ede_pfau]

You probably lose the policies because the VIP is missing because of misconfiguration.

Have you checked the "What's New in FortiOS 5.2.1" and newer if there are changes in the way VIPs are defined (I'm not aware of any). Might be that the port used in the VIP is not available or such.

After importing, please check what the FGT thinks the problem is:

diag debug conf read