How to migrate from standalone configuration (R80.10) to distributed?

[Evgeniy_Olkov]

Hello. We have a cluster of two gateways with R80.10. It's standalone configuration. We need to migrate to distributed. I can't find any instruction for this case. All sk's for R77.30 and it does not work for R80.10.

Need help.

[_Val_]

If I remember correctly our private conversation, you have a particular error when doing migrate import. Is that the case? If yes, please outline it in the post, so we could deal with an actual issue and not a general theoretical discussion.

Thanks

[Evgeniy_Olkov]

I have received the answer form support:

Continuing our conversation,

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...,

In this SK there is an official statement:

“Migration of Full HA environment to Distributed environment is not supported in R80.x”

[_Val_]

ouch...

[_Val_]

Okay then. Migrate it while on R77.30. Then upgrade to R80.10

[Juan_Concepcion]

I just completed this successfully - as always had to piece it together.  

Create a temp directory to house the export:

mkdir migration

Copy the archive to this directory (myarchive.tgz in my example)

Extract the archive:

tar -xvzf myarchive.tgz

Modify the files from the archive:

configuration - change line:

RegistryKeys FWManagement,Firewall,Primary

to

RegistryKeys FWManagement,Primary (remove firewall)

configuration2

:is_firewall_module (yes)

to

:is_firewall_module (no)

:installed_products_registry_string ("FWManagement,Firewall,Primary")

to

:installed_products_registry_string ("FWManagement,Primary")

tar up the archive:

tar -cvzPf mynewarchive.tgz *

This allowed me to import the configuration.  I was then able to go in and deselect firewall module and install database on the newly imported management station.

Hope this helps!!!

[PhoneBoy]

Nice that you were able to work it out!

In general, we do plan to have formal support for this again.

[_Val_]

Nice one, Juan Concepcion‌