Replacing a router

[haa]

hi  everyone, 

One of our clients is changing their Pfsense router, and we're goning to replace it with a cisco. 

I've never worked on pfsenses, and the client need to migrate the complete configuration to the cisco.

I've uploaded the .xml configuration file, but it doesn't much with the cisco technology, does esxist anyway to import this configuration to the Cisco?

Note: The pfsense configuration is a bit difficult to just copy it and configure one piece after another.

Thank you for your help

[Julio E. Moisa]

Hi

I don't know about pfsenses but I assume its CLI is different to Cisco, the hardware could vary so the commands as well.

I suggest analyze the config first then segment the config by sections (routing, security, IP addressing, etc) and finally make a script with the Cisco commands in order to be pasted on the new Cisco Router. Everything manually. 

Hope it is useful

:-)

[haa]

Okey I'll try to do that. 

One question if u don't mind ! You have an idea how to create an access list for a pool of ports ? 

I need to permit access through the port from 10000 to 10100. 

Thank you

[Iulian Vaideanu · Accepted solution]

I'm not sure if this goes for all routers and all IOS versions - taken from a 4900M running 15.1(2)SG:

rd1(config-ext-nacl)#permit tcp host 192.168.1.1 host 192.168.2.1 ?
[...]
  range        Match only packets in the range of port numbers
[...]
  <cr>

rd1(config-ext-nacl)#permit tcp host 192.168.1.1 host 192.168.2.1 range 10000 10100

[haa]

And if we want to translate this ports using NAT to another range of ports ?