Migration Management server from smart 410 to VMware

[Harmesh_Yadav]

Dear Team,

we are using Smart-1 410 Device for managing existing checkpoint devices , It having licenses of 10 Gateways because of Hardware limit and license limit we have bought new license for 25 gateways -CPSM-NGSM25- It will install in VMWare -

We are going to migrate old setup to new one

Currently 8 gateways already registered with old management . remaining gateways we are going to implement soon

OS is Gaia 80.30

I wil follow this steps

1. Install same OS and Hotfix , do initial configuration

2. get migrate export file from old MGMT

3. Import migrate export file in New MGMT server

In production environment we can not move all gateways in one

So need suggestion from your side

what steps i should follow which will help to do this activity in minimum downtime and less challenges.

Correct me if i am wrong

Regards,

Harmesh Yadav

[HeikoAnkenbrand]

Hi @Harmesh_Yadav 

Steps for R80.30:

1) Install the migrate export tools R80.30  on the Smart1 appliance.

2) Export the SMS database via "migrate export"
# $FWDIR/bin/upgrade_tools/migrate_export  <output tgz file>

3) Install the open server as SMS on VMWare ESX, install same JHF and install the R80.30 migrate tool. Use the same IP as the old Smart 1 410 appliance.

4) Import the database via "migrate import"
# $FWDIR/bin/upgrade_tools/migrate import <export tgz file>

[Harmesh_Yadav]

 Thanks for your reply - Appreciate it

Post this migration

Actually what i am asking that i have 8 Gateway which is live in production so i should move it to new management - How can i move it with minimum downtime

should i do - in one shot or one by one ?

[Chris_Atkinson]

Are you reusing the hostname/IP?

sk86521 can help depending on the scenario.

[Harmesh_Yadav]

Thanks for your reply - I will use same IP address

[HeikoAnkenbrand · Accepted solution]

Hi @Harmesh_Yadav,

It is no problem that the management server is offline for some time. Therefore the action is not time critical.

1) Install the migrate export tools R80.30  on the Smart1 appliance.

2) Export the SMS database via "migrate export"
# $FWDIR/bin/upgrade_tools/migrate_export  <output tgz file>

>>>  As described! Install a new SMS under VMWare and transfer the config in a LAB environment. Use the same IP as the old Smart 1 410 appliance. You can use a different VMWare network for this. Therefore there is no IP address conflict with the old management server.

3) Install the open server as SMS on VMWare ESX, install same JHF and install the R80.30 migrate tool. Use the same IP as the old Smart 1 410 appliance.

4) Import the database via "migrate import"
# $FWDIR/bin/upgrade_tools/migrate import <export tgz file>

>>> Now make a poweroff on the Smart 1 410

>>> Now add the new VMWare SMS to the correct VMWare network.

Done😀

[Harmesh_Yadav]

Thanks for your reply ...

Means as you said it will be done in one shot right ?

For SIC reset will be required in this case ?

and if VMWARE Server side if IP schema will be different and if in this activity client dont want to give same ip and use vmware zone available  ip so is it possible ?

And GAIA GUI Configuration i should do same - what i will do i will copy cli command and do same configuration in NEW MGMT and name of interface i will change if require --- it is ok right ?

Regards,

Harmesh Yadav

[Harmesh_Yadav]

HI, i have requirement to get all log in new MGMT VM which is present in old MGMT so what wil be the process for that ?

[Chris_Atkinson]

Did you use migrate export -l ?

Exports and imports the Check Point logs without log indexes in the $FWDIR/log/ directory.

Note - The command can export only closed logs (to which the information is not currently written).

Refer also sk92440