topic Re: migrate to maestro in Hyperscale Firewall (Maestro)

migrate to maestro

dkurochkin — Thu, 20 Jan 2022 13:09:36 GMT

hello

we have clusterXL, ha mode in production and MHO 140.

may be exists instruction to migrate from clusterXL to MHO ?

interested in contept of migration cluster addresses to the maestro

thx

Re: migrate to maestro

Chris_Atkinson — Fri, 11 Feb 2022 14:18:08 GMT

Do you have new gateways accompanying the MHO aswell or just reusing existing?

Generally this would be done as a parallel build and cutover by moving the virtual plumbing (adding vlans to trunks and disabling / activating corresponding switch ports.)

Re: migrate to maestro

dkurochkin — Fri, 11 Feb 2022 13:33:30 GMT

clusterxl uses vip address as default route for systems

mho uses smo entity, how can I make it so that all Vip addresses migrate to the smo object without headache?

Re: migrate to maestro

Chris_Atkinson — Fri, 11 Feb 2022 14:08:46 GMT

The VIPs on the existing cluster will become interface IPs on the new Security Group.

You will need to consider ARP timeout / cache on the adjacent devices.

Obviously both systems with exception of the management interface cannot be connected (live) at the same time to avoid issues prior to the migration.

Re: migrate to maestro

dkurochkin — Tue, 15 Feb 2022 10:41:13 GMT

also

why mho cant see any interfaces/devices ?

connected:

int 1/1/1 to SMS
int 1/5/1 to network (uplink)
int 1/27/1 to appliance (downlink)

Re: migrate to maestro

Chris_Atkinson — Thu, 17 Feb 2022 12:16:59 GMT

Assuming you have the latest JHF applied for the version running on the MHO please contact TAC to progress your issue in a more efficient manner.