Skip to main content
RunBook Academy

VyOSLV · Backup, Restore, Disaster RecoveryBackup

Restore onto a different appliance — hardware replacement, configuration migration, IP changes

Advanced⏱ ~24 minvyosloadcomparecommitsaveshow interfacesshow configuration

What you'll learn

  • Explain the hardware-replacement scenario and the configuration-migration scenario
  • Identify the IP and interface changes that may be required for a different-appliance restore
  • Perform a different-appliance restore with the load / verify / commit / save discipline
  • Recognise the production failure modes where a different-appliance restore goes wrong

Prerequisites

Verified against VyOS 1.5.x LTS (circinus) · VyOS 1.4.x (sagitta) — legacy · FRRouting 10.x (VyOS 1.5) · Linux kernel 6.6 LTS (VyOS 1.5 base) · strongSwan 5.9.x (IPsec) · WireGuard 1.0.x (kernel module + userspace tooling) · 2026-08-15

Not yet marked complete on this device.

A different-appliance restore is the recovery procedure for a router that has been replaced (RMA, hardware failure, end-of-life) or a new router that takes over an old one’s role. The configuration from the old router is loaded onto the new router; the new router takes over.

The procedure is more complex than a same-appliance restore because the new router may have:

  • Different interface names (eth0 vs eth1 vs ens3 vs enp0s3 depending on the platform).
  • Different MAC addresses (the new router’s interfaces have new hardware addresses).
  • Different IP addresses (if the new router replaces the old one in a different IP range).
  • Different hardware capabilities (the new router may have different interface speeds, different number of ports, different cryptographic acceleration).

This lesson covers the hardware-replacement scenario, the configuration-migration scenario, the IP and interface changes that may be required, and the production failure modes where the migration goes wrong.

The hardware-replacement scenario

The original router fails (hardware failure, RMA). The operator receives a replacement router with the same model and interface layout. The operator’s goal: bring the replacement router up with the same configuration as the failed router.

flowchart LR
  OLD[Old router\nfailed] -->|config from Git| NEW[New router\nsame model]
  NEW -->|verify interfaces| CHECK{Interfaces\nmatch?}
  CHECK -->|yes| COMMIT[Commit and save]
  CHECK -->|no| FIX[Fix interface names]
  FIX --> CHECK
  COMMIT --> PRODUCTION[Production traffic]

The diagram shows the procedure: pull the configuration from Git; load it onto the new router; verify that the interface names match the new router’s hardware; commit and save. If the interface names do not match, the operator must edit the configuration to use the new names.

The configuration-migration scenario

A router is replaced with a different model (e.g. the old router is a 1U appliance with 4 ports; the new router is a 2U appliance with 8 ports). The operator’s goal: bring the new router up with the same logical configuration as the old router, but with interface names adapted to the new hardware.

flowchart LR
  OLD[Old router] -->|config from Git| NEW[New router\ndifferent model]
  NEW -->|identify interfaces| MAP[Map old names to new]
  MAP -->|edit config| ADAPT[Adapt interface names\nand IP addresses]
  ADAPT --> COMMIT[Commit and save]
  COMMIT --> TEST[Test in lab\nverify in production]

The diagram shows the migration procedure: pull the configuration from Git; identify the new router’s interface names; map the old names to the new; edit the configuration; commit and save; test in lab; verify in production.

Interface name mapping

Different hardware platforms use different interface naming conventions:

  • Traditional NIC nameseth0, eth1, eth2. Used by older VyOS installations and some hardware platforms.
  • Predictable NIC namesenp0s3, ens4. Used by newer Linux kernels and some VyOS installations.
  • Bus-position nameseno1, eno2. Used by some server hardware.

The operator must identify the new router’s interface names and map them to the old router’s:

# Show the new router's interfaces
show interfaces

# Example output:
# Interface        IP Address        Status    Description
# lo               127.0.0.1/8       up
# eth0             -                 up
# eth1             -                 up
# eth2             -                 down
# eth3             -                 down

The new router has interfaces eth0, eth1, eth2, eth3. The old router’s configuration references eth0 and eth1. The mapping is direct.

A more complex mapping: the old router has eth0, eth1, eth2, eth3; the new router has eno1, eno2, eno3, eno4. The operator must edit the configuration to replace eth0 with eno1, eth1 with eno2, etc.

IP address changes

A different-appliance restore may require IP address changes if the new router is in a different IP range than the old router. For example:

  • The old router had 192.0.2.1/24 on eth0. The new router is connected to the same network and uses the same IP.
  • The old router had 192.0.2.1/24 on eth0. The new router is connected to a different network and uses 203.0.113.1/24.

In the first case, no IP changes are needed. In the second case, the operator must edit the configuration to use the new IP.

# Edit the interface to use the new IP
configure
set interfaces ethernet eth0 address 203.0.113.1/24
delete interfaces ethernet eth0 address 192.0.2.1/24
commit
save

The IP change cascades: the BGP neighbours reference the old IP; the OSPF neighbours reference the old IP; the firewall rules reference the old IP. The operator must update all of these to use the new IP.

The procedure

The different-appliance restore procedure:

  1. Identify the new router’s interfacesshow interfaces on the new router.
  2. Map old names to new — identify the mapping between the old router’s interface names and the new router’s.
  3. Copy the configuration to the new routerscp from the Git repository or the off-box file server.
  4. Edit the configuration — replace the old interface names with the new names; update IP addresses if required.
  5. Load, verify, commit, save — the standard four-step procedure.
  6. Test in lab — if possible, test the configuration in a lab environment before deploying to production.
  7. Verify in production — after deployment, verify that all routing protocol sessions are established and that traffic flows correctly.

Failure modes

Interface name mismatch

The operator loads the configuration without checking the new router’s interface names. The commit fails with “interface eth0 does not exist”.

Diagnostic: the commit log shows the interface error.

Fix: identify the new router’s interface names; edit the configuration; reload; verify; commit.

IP address conflict

The operator keeps the old router’s IP address on the new router. The old router is still operational (the operator forgot to power it off); both routers have the same IP; ARP flapping and routing instability.

Diagnostic: the network sees duplicate ARP entries; the routing protocols flap.

Fix: power off the old router; clear the ARP cache on the neighbour; verify the new router’s IP is the only one in use.

Routing protocol session down

The new router’s IP is different from the old router’s; the peer’s configuration references the old IP; the session does not establish.

Diagnostic: show ip bgp summary shows the session as Idle (Active).

Fix: coordinate with the peer operator to update the peer’s configuration to reference the new IP. The session re-establishes.

Hardware capability mismatch

The new router has fewer interfaces than the old router. The configuration references interfaces that do not exist on the new router.

Diagnostic: show configuration shows the missing interfaces; the commit fails.

Fix: edit the configuration to remove the missing interfaces; reload; verify; commit.

Rollback

A different-appliance restore is reversible through the standard VyOS mechanisms:

  • rollback N and commit to revert to the previous configuration revision.
  • The old router’s configuration is in the Git repository; the operator can recover if the new router’s configuration is unrecoverable.

The VyOS commit validator catches invalid configurations; the restore is safe to run after the operator has verified the configuration.

Production discipline

Cross-course references

  • LV-VyOS-Backup (vyos-lv-03-restore-same-appliance, the previous lesson) covers the same-appliance restore that the different-appliance restore extends.
  • VII-VyOS-Interfaces (vyos-vii-01-ethernet-addressing) covers the interface addressing that the different-appliance restore operates on.
  • IV-VyOS-Install (vyos-iv-01-iso-install) covers the installation that may precede a different- appliance restore (e.g. fresh install on the replacement router).

Quiz

Knowledge check · 4 questions

  1. Q1. What is the first step in a different-appliance restore?

  2. Q2. A different-appliance restore should still be lab-tested when the replacement is the same model as the old router.

  3. Q3. An operator receives a replacement router for edge-01 (hardware failure). The operator loads the saved configuration from the Git repository. The commit fails with `interface eth2 does not exist`. The new router only has eth0 and eth1. What went wrong and what is the fix?

    An operator loads a saved configuration onto a replacement router for edge-01. The commit fails with `interface eth2 does not exist`. The new router only has eth0 and eth1.

  4. Q4. An operator replaces edge-01 with a new router. The new router is configured with the same IP address as the old router. The old router is still powered on. The network sees duplicate ARP entries; routing protocols flap. What went wrong and what is the fix?

    An operator replaces edge-01 with a new router. The new router is configured with the same IP as the old router. The old router is still powered on. The network sees duplicate ARP entries.

Passing score: 75%. Answers are checked in this browser.