topic Re: How to stop only a virtual system in a R80.40 VSX box running other VS's in Firewall and Security Management

How to stop only a virtual system in a R80.40 VSX box running other VS's

Maller — Tue, 25 Oct 2022 16:54:00 GMT

Hello checkmates....

I'm afraid that it's not possible but I would like to ask you for this subject...

I have to migrate a R80.40 VSX VS box (EoS) to a new hardware and inside this box there are running 5 VS. My intention is to do a one by one migration but I need to stop only the migrated VS . Is it possible? I don't find any vsx command to stop only one VS.

Thank you

Manel

Re: How to stop only a virtual system in a R80.40 VSX box running other VS's

Wolfgang — Tue, 25 Oct 2022 17:55:55 GMT

@Maller cpstop/cpstart in the context of a VS stops and starts this virtual system. In the past (older R77.x releases) you could do that with script vs_stop.sh vs_start.sh, but these are no longer available.

Re: How to stop only a virtual system in a R80.40 VSX box running other VS's

Chris_Atkinson — Tue, 25 Oct 2022 23:04:05 GMT

sk169472 is relevant here.

Depending on the connectivity others might shutdown/disable interfaces on the network side.

Re: How to stop only a virtual system in a R80.40 VSX box running other VS's

Wolfgang — Wed, 26 Oct 2022 04:59:57 GMT

Another idea will be changing the VLAN IDs of the interfaces in the old VS before the new VS are started. With this you have a quick way to switch back.

Re: How to stop only a virtual system in a R80.40 VSX box running other VS's

_Val_ — Wed, 26 Oct 2022 09:44:31 GMT

You do not need to stop it. You can unload the policy on it, and disconnect it from the networks during migration. Once you moved traffic to a physical box, and it is proven to work well, you can just delete that VS, to finish the migration. You do not really need to stop a VS, though.

Re: How to stop only a virtual system in a R80.40 VSX box running other VS's

ThomasGro — Thu, 18 Apr 2024 14:38:15 GMT

Old thread, but still applicable. Consult https://support.checkpoint.com/results/sk/sk169472 (How to restart a specific VSX Virtual System in R80.30 and higher)