Secondary MDS Migration and IP Change

[VannessChen]

Hi Check Point experts,

The customer’s secondary MDS will undergo hardware relocation, moving from Site A to Site B. Since the subnets of Site A and Site B are different, the MDS IP address will also need to be changed.

As the network resources at Site B are already available, my current plan is as follows:

1. First, set up the MDS at Site B and add it as a third MDS member into the MDS group.

2. Shut down the MDS at Site A.

3. Update the License IP of the secondary MDS in the Product Center to match the Site B IP.

4. Import it into the Site B MDS and synchronize data with the Primary MDS.

Are there any mistakes or concerns with the above steps that I should be aware of?

[JozkoMrkvicka · Accepted solution]

Make sure MDS to be moved is really Secondary MDS and Primary MDS will be available all the time.

I would go this way:

1. Perform full sync and snapshots on both MDSs

2. Remove Secondary MDS from HA

3. Perform factory reset

4. move MDS to new location

5. Finish FTW as Secondary MDS

6. Add license with new IP

7. Add Secondary MDS into HA with Primary

[VannessChen]

Hi Jozko Mrkvicka,
Following your advice, I have successfully completed the secondary MDS migration across sites.

However, I encountered some issues while creating the Secondary CMA. After several attempts, the problem could only be resolved by restarting the Primary MDS and then recreating the Secondary CMA.

Thank you again for your support.