Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
dehaasm
Collaborator

migrate SMS and gateways to new management IP network

We have an existing SMS with about 12 gateways managed using R81.10. We would like to migrate both SMS, smartevent server and gateways to new management IP network. Currently all gateways are management using the physical management interface and routed to the SMS. 

My recommendation would be;

  • Deploy a new SMS in the new management network 
  • Add a new management vlan to all gateways (same management network as SMS), not the management interface
  • migrate configuration from old to new SMS
  • Perform SIC norestart on all gateways and add them to the new SMS following this SK (one by one)

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

I believe this would be the best approach. Perhaps there is an easier way to add an additional IP address to the SMS but i believe ony one would be "known" to the gateways so it is quiet risky to do a big bang.

Please leave your thoughts in the comments.

0 Kudos
1 Reply
Tal_Paz-Fridman
Employee
Employee

 

  1. Create a dummy object with the IP address of the new Security Management Server.
  2. Add the object to a new rule allowing all Security Gateways to accept connections from it.
  3. Install the policy.
  4. Export and import the configuration.
  5. Complete the remaining steps, including updating the Security Management Server object's IP address in SmartConsole + Install Database
  6. Install the policy on Security Gateways
  7. Delete the dummy object.

This will remove the need to reset SIC

 

 

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events