topic Re: How to migrate Full HA R80.30 environment to Distributed R81.10 environment in General Topics

How to migrate Full HA R80.30 environment to Distributed R81.10 environment

TSOL — Mon, 07 Nov 2022 02:37:47 GMT

Hello Community,

I hope you are well.

I have a request for you, because I can't find an answer that resolve my problem.

Our client currently has a Full HA environment running on two 5800 appliances with the version of gaia (R80.30).

He want to replace 5200 appliances to two Smart-1 appliances and two 6200 appliances.

Is there any SK or recommended documentation to migrate full HA R80.30 to distributed R81.10 environment ?

I found the post, but the last post is 2 years ago.

How to migrate Full HA R80.40 environment to Distr... - Check Point CheckMates

Thanks in advance

Re: How to migrate Full HA R80.30 environment to Distributed R81.10 environment

the_rock — Mon, 07 Nov 2022 03:17:55 GMT

I believe this is official supported process:

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk154033

Maybe @PhoneBoy can confirm for sure for you.

Re: How to migrate Full HA R80.30 environment to Distributed R81.10 environment

_Val_ — Mon, 07 Nov 2022 06:41:49 GMT

no Phoneboy, but yes, this SK describes the migration process.

Re: How to migrate Full HA R80.30 environment to Distributed R81.10 environment

TSOL — Mon, 07 Nov 2022 08:11:48 GMT

Thank you for the information.

The SK read, but the SK's OS is R80.40 and standalone,

Our customer's exsisted environment is R80.30 and Full HA.

Maybe I think that we need many step to replace their environment.

I hope there are simple steps of replacement.

Re: How to migrate Full HA R80.30 environment to Distributed R81.10 environment

_Val_ — Mon, 07 Nov 2022 08:42:28 GMT

The missing step is about moving Full HA to a Standalone in your case, correct?

You need to run the following commands on your primary member:

cp_conf fullha disable
cp_conf fullha del_peer

The commands should disable Full HA and then delete the second peer from the config. Once done, you end up in a Standalone and can follow the mentioned SK.

More info in Next Generation Security Gateway R80.30 Guide

Re: How to migrate Full HA R80.30 environment to Distributed R81.10 environment

TSOL — Mon, 07 Nov 2022 10:12:29 GMT

Thank you for the information.

The cutomer's environment need special permission to stop the system,

we should to minimize the time the system is down. And we don't have the permission of changing the existing system.

So we plan to build a new Quantum and Smart-1 and operate them in parallel.

This ways, customers can switch equipments with minimal downtime.

Is there migrate ways existing equipments(FULL HA and R80.30) configuration to new equipments(Distributed R81.10 )?

Thanks in advance

Is there mirate server

Re: How to migrate Full HA R80.30 environment to Distributed R81.10 environment

_Val_ — Mon, 07 Nov 2022 10:45:38 GMT

Replicate the environment in the lab and prepare the new Management and GWs for migration from the staged lab environment.