Migrate from R81.20 to R82.10

[StevePearson]

Just wondering if anyone has tried this upgrade and how successfully it was?

I'm just testing it and i'm seeing a few issues. I've spun up a new vm (VMware workstation Pro using RedHat Enterprise 9 as the base OS), 4 CPU's and 8Gb Ram with a 500Gb Drive), then used the latest R82.10 ISO to install the SMS.

First problem was the upgrade tools. In Gaia I tried to install the latest upgrade tools from a download saved on the local machine, but it locked up importing. closed the browser, rebooted the box and tried again and it installed ok! (I went through the clean install process twice as the first time I gave it too smaller disk, and it did the same on both occasions!)

Second problem, in the Gaia updates screen there is a banner across the top about it needing a license to access the update servers and there was a trial license installed. Fine, not a problem.

So I logged into CLI, having copied the exported file to it first, and ran the migrate_server to import it, but it failed saying that there was no license. cplic print verified that there were no licenses installed at all, which is strange as it told me in Gaia that there was a trial license, and that's what I'd expect. Not sure if that is a new thing in R82.10, certainly wasn't in R82. Grabbed an eval and put that on, before trying again but this time the migration failed after 2 hours with the error....

sed: can't read /var/log/machine-id: No such file or directory

There is plenty of disk space!

I've regenerated the export file and running an import again now but it appears to be stuck at 10% with the report showing it's on the stage "Creating default objects and restarting services", been there for a good 45 minutes now!

Currently open with TAC, but wondering if anyone has any ideas or suggestions?

[StevePearson]

Worth mentioning the source is a Smart-1 600 appliance, but I don't think that should make a difference

[the_rock]

Hey Steve,

I know sometimes even with trial license, it may complain, so eval is usually needed (at least). Now, as far as migrate server process, I had issue couple times before myself, see if below helps?

https://community.checkpoint.com/t5/Firewall-and-Security-Management/migrate-server-process-tip/m-p/...

[StevePearson]

Hi Andy,

I've never encountered an issue with a trial license before!

You linked article has raised an interesting point, I have always done it using the cd statement first then ./migrate_server, however on this occasion as i dropped the export in the home directory I used ~/exportfile.tgs rather than /user/home/exportfile.tgz so i'm wondering if this use of abbreviated path may be related in some way!

Just running it again now to test it, will let you know

[the_rock]

Sounds good, let me know. Happy to do remote and we can check together, if need be.

[StevePearson]

Hi Andy,

I never did get to the bottom of this import issue!

The migrate_server file simply would not import, despite multiple attempts under both VMware and Hyper-V. TAC requested the file, which I sent, and they said it imported just fine! He gave me the command that he used, which was pretty much the same as i'd used but even with that it wouldn't import for me. He then exported it, sent back the export file and I imported it without any issues. I can only assume he did something to the file before he imported it, but I guess i'll never know!

Regards, Steve

[the_rock]

Its possible. I mean, I once had an issue with file extension and when I changed it, worked fine.