What is the procedure to Migrate firewall from one management server to another?

[Abichal_Shukla]

Hi,

We have 2 management server both having R77.30. So I have got a project to move 8 firewalls from one Management server to another.

Hence need a plan for this, can anyone help me regarding the same.

The version of both the management servers and all the firewalls in R77.30.

Regards,

Abi

[PhoneBoy]

At a high level:

• If necessary, copy the relevant configuration from the old management
  • For R77.30, you can use tools like
    • Confwiz (unfortunately, no longer made available)
    • odump/ofiller (available on the Internet)
  • If this was R80, you would use: Python tool for exporting/importing a policy package or parts of it‌
• Reset SIC on the gateway
  • Use cpconfig to do this--see Reset SIC On R80.10 Gateway? , which requires an outage.
  • Alternatively use the procedure in sk86521 which does not (this is an Expert-level SK, must be obtained from TAC).
• Establish SIC from the Gateway Object on new Management server
• Push Policy

[Abichal_Shukla]

Thanks for the reply .

I have few question:-

1. How am i going to change the IP of the Management server on the gateway?

2. Do i need to reinstall the licence from the new management server to the gateways?

3. As I have to move only few firewalls to new management server, is there any option to export/import particular policy package? 

[PhoneBoy]

1. Resetting the SIC effectively changes the Management IP.

2. Depends on how the licenses are generated. If they are tied to the management, then you will have to, yes. 

3. I'm not sure if odump/ofiller allow partial import/exports or not. You'll have to read the documentation on the tool.

[Will_H]

Check out sk33751for cp_merge

cp_merge takes the SIC with it too... 

Read the SK carefully... 

Thoughts Dameon Welch Abernathy‌

[PhoneBoy]

cp_merge is another way to do it as well.

[Abichal_Shukla]

Thanks a lot guys for your help

Will go through all this.