topic Re: How to migrate from standalone configuration (R80.10) to distributed? in Firewall and Security Management

How to migrate from standalone configuration (R80.10) to distributed?

Evgeniy_Olkov — Wed, 31 Oct 2018 06:47:04 GMT

Hello. We have a cluster of two gateways with R80.10. It's standalone configuration. We need to migrate to distributed. I can't find any instruction for this case. All sk's for R77.30 and it does not work for R80.10.

Need help.

Re: How to migrate from standalone configuration (R80.10) to distributed?

_Val_ — Wed, 31 Oct 2018 10:02:33 GMT

If I remember correctly our private conversation, you have a particular error when doing migrate import. Is that the case? If yes, please outline it in the post, so we could deal with an actual issue and not a general theoretical discussion.

Thanks

Re: How to migrate from standalone configuration (R80.10) to distributed?

Evgeniy_Olkov — Thu, 01 Nov 2018 08:19:54 GMT

I have received the answer form support:

Continuing our conversation,

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk44201&partition=Advanced&product=ClusterXL,

In this SK there is an official statement:

“Migration of Full HA environment to Distributed environment is not supported in R80.x”

Re: How to migrate from standalone configuration (R80.10) to distributed?

_Val_ — Thu, 01 Nov 2018 08:21:51 GMT

ouch...

Re: How to migrate from standalone configuration (R80.10) to distributed?

_Val_ — Thu, 01 Nov 2018 08:23:48 GMT

Okay then. Migrate it while on R77.30. Then upgrade to R80.10

Re: How to migrate from standalone configuration (R80.10) to distributed?

Juan_Concepcion — Fri, 02 Nov 2018 14:03:06 GMT

I just completed this successfully - as always had to piece it together.

Create a temp directory to house the export:

mkdir migration

Copy the archive to this directory (myarchive.tgz in my example)

Extract the archive:

tar -xvzf myarchive.tgz

Modify the files from the archive:

configuration - change line:

RegistryKeys FWManagement,Firewall,Primary

RegistryKeys FWManagement,Primary (remove firewall)

configuration2

:is_firewall_module (yes)

:is_firewall_module (no)

:installed_products_registry_string ("FWManagement,Firewall,Primary")

:installed_products_registry_string ("FWManagement,Primary")

tar up the archive:

tar -cvzPf mynewarchive.tgz *

This allowed me to import the configuration. I was then able to go in and deselect firewall module and install database on the newly imported management station.

Hope this helps!!!

Re: How to migrate from standalone configuration (R80.10) to distributed?

PhoneBoy — Sat, 03 Nov 2018 07:57:09 GMT

Nice that you were able to work it out!

In general, we do plan to have formal support for this again.

Re: How to migrate from standalone configuration (R80.10) to distributed?

_Val_ — Sat, 03 Nov 2018 14:31:57 GMT

Nice one, Juan Concepcion‌