topic What is the procedure to Migrate firewall from one management server to another? in General Topics

What is the procedure to Migrate firewall from one management server to another?

Abichal_Shukla — Fri, 05 Oct 2018 22:16:16 GMT

Hi,

We have 2 management server both having R77.30. So I have got a project to move 8 firewalls from one Management server to another.

Hence need a plan for this, can anyone help me regarding the same.

The version of both the management servers and all the firewalls in R77.30.

Regards,

Abi

PhoneBoy — Fri, 05 Oct 2018 22:30:01 GMT

At a high level:

If necessary, copy the relevant configuration from the old management
- For R77.30, you can use tools like
  - Confwiz (unfortunately, no longer made available)
  - odump/ofiller (available on the Internet)
- If this was R80, you would use: Python tool for exporting/importing a policy package or parts of it‌
Reset SIC on the gateway
- Use cpconfig to do this--see Reset SIC On R80.10 Gateway? , which requires an outage.
- Alternatively use the procedure in sk86521 which does not (this is an Expert-level SK, must be obtained from TAC).
Establish SIC from the Gateway Object on new Management server
Push Policy

Abichal_Shukla — Fri, 05 Oct 2018 23:00:08 GMT

Thanks for the reply .

I have few question:-

1. How am i going to change the IP of the Management server on the gateway?

2. Do i need to reinstall the licence from the new management server to the gateways?

3. As I have to move only few firewalls to new management server, is there any option to export/import particular policy package?

PhoneBoy — Fri, 05 Oct 2018 23:09:26 GMT

1. Resetting the SIC effectively changes the Management IP.

2. Depends on how the licenses are generated. If they are tied to the management, then you will have to, yes.

3. I'm not sure if odump/ofiller allow partial import/exports or not. You'll have to read the documentation on the tool.

Will_H — Sat, 06 Oct 2018 01:05:57 GMT

Check out sk33751for cp_merge

cp_merge takes the SIC with it too...

Read the SK carefully...

PhoneBoy — Sat, 06 Oct 2018 12:07:43 GMT

cp_merge is another way to do it as well.

Abichal_Shukla — Sat, 06 Oct 2018 19:44:55 GMT

Thanks a lot guys for your help

Will go through all this.