topic Re: the use of this flag '-change_ips_file' is obsolete in Firewall and Security Management

the use of this flag '-change_ips_file' is obsolete

rt3d01 — Thu, 26 May 2022 07:53:40 GMT

Hi Checkmates,

Has anyone successfully performed an MDS migration and also changed the ip addess of MDS?

if so do you knows how to import the mdss.json file for changing the ip address of a Multi-Domain Servers to be imported into R80.40

reading the checkpoint documentation, the following parameter should be used to change the ip addess

./migrate_server import -v R80.40 -skip_upgrade_tools_check -change_ips_file /var/log/mdss.json /<Full Path>/Primary_<Name of Exported File>.tgz

however when this parameter is entered the following appears

The flag '-change_ips_file' is obsolete. Create the required file /var/log/mdss.json with the new IP address(es) and run the import again.

the question is how do we proceed to change the ip addess before importing the database, is there a workaround?

Thanks

Re: the use of this flag '-change_ips_file' is obsolete

G_W_Albrecht — Thu, 26 May 2022 08:19:46 GMT

Just contact TAC to get this resolved asap !

reading the checkpoint documentation, the following parameter should be used to change the ip addess

Where did you find that ? In sk156072 and sk163814 i read very different commands...

Re: the use of this flag '-change_ips_file' is obsolete

_Val_ — Thu, 26 May 2022 08:38:33 GMT

Did you try to run the command with json file in the command line but without the mentioned flag?

Re: the use of this flag '-change_ips_file' is obsolete

rt3d01 — Thu, 26 May 2022 08:39:44 GMT

in step 10 on this link

https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_Installation_and_Upgrade_Guide/Topics-IUG/Upgrading-MDSs-in-Mgmt-HA-from-R80_20-and-higher-with-Advanced-Upgrade.htm

10. Required JSON configuration file

On the Primary R80.40 Multi-Domain Server, import the databases

Re: the use of this flag '-change_ips_file' is obsolete

rt3d01 — Thu, 26 May 2022 08:42:21 GMT

command has been entered has this

./migrate_server import -v R80.40 -skip_upgrade_tools_check -change_ips_file /var/log/mdss.json /var/log/Export-database

Re: the use of this flag '-change_ips_file' is obsolete

_Val_ — Thu, 26 May 2022 09:10:23 GMT

I understand that 🙂 Asking if you did try going without the mentioned flag while leaving everything else as it is

Re: the use of this flag '-change_ips_file' is obsolete

G_W_Albrecht — Mon, 30 May 2022 07:57:36 GMT

You did not mention that you have MDS configured in Management HA - this legacy option usually creates a lot of headaches... This is a situation when TAC is needed very badly !

Re: the use of this flag '-change_ips_file' is obsolete

rt3d01 — Mon, 30 May 2022 09:00:29 GMT

The CP documentations for HA MDS migration needs to be reviewed and updated, even the previous documentations for older version of R80.X has this flag '-change_ips_file'

Re: the use of this flag '-change_ips_file' is obsolete

G_W_Albrecht — Mon, 30 May 2022 09:10:34 GMT

Better not use Management HA - there could be a need for global scale MDS/MDM deployments but this only concerns a very small number of target customers and alternatives are also available. With SMS usually installed in a VM, Management HA is now legacy only, similar to the most dreaded Full Management HA ☹️.