Hello,
I want to switch from a RB951G-2HnD to a CCR1009-7G-1C-PC.
Is it possible to move all the settings (incl. crt, key files) to the new hardware?
Thanks for your help!
No, it is not possible to do it in one step. Binary backups (created by /system backup save …) are not transfereable between different device models. Configuration exports (created by /export file=…), however, are transfereable, but don’t include some stuff, such as users (and passwords), SSL certificates and SSH keys. SSH keys are special matter as it is not possible to actually export them from ROS. Further more, config exported from RB951G won’t apply 1:1 to CCR1009 due to some hardware differences (such as number of ethernet ports), so you won’t be able to apply it directly.
My suggestion would be the following: start off from default config available in recent ROS version on RB951G (among other things it includes pretty decent firewall, AFAIK CCR doesn’t have it) and transplant it to CCR. Then take actual configuration from RB951G and make alternations on CCR as required … but be sure those changes fit into the RB951G default config transplanted to CCR, if your RB951G config dates far back, then it’s likely that it’s quite different from what are current defaults. Also re-create needed users and passwords. Create new SSH keys and import them to CCR (or fetch those keys from external server if RB951 keys were generated off-router). Export SSL certificates from RB951G (using /certificate export …) and import them to CCR … or fetch new ones with extended validity and import them to CCR.