Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
RAGHU_K
Contributor

Issue in Importing Management Server Migrate Export File on a CMA

Hi! Guys,

 

I have a Management Server running in R80.20 Gaia. Also, I have an MDS setup with multiple CMAs running on it.

Now am trying to Migrate my Management Server's Database (policies & objects) to a new CMA in my MDS. I will keep the same hostname & IP-address as like in the Management Server on my CMA. 

 

To achieve this, i followed the below steps:

1) Took a Migrate Export  file from the Management Server

# ./migrate export MGMT-DELHI_Mig_Exp

 

2) On my MDS Setup, i have created a CMA from the mgmt_cli utility & didn't started it for the first time.

[Expert@PRIMARY-MDS:0]# mgmt_cli add domain name Domain-DELHI servers.ip-address 10.10.10.20 servers.name MGMT-DELHI servers.multi-domain-server PRIMARY-MDS servers.skip-start-domain-server true

 

3) Copied the Migrate Export File (MGMT-DELHI_Mig_Exp.tgz)  on to the MDS device in /home/admin directory.

 

4) Using the cma_migrate command, am trying to import the Migrate Export file on the newly created CMA.

[Expert@PRIMARY-MDS:0]# cma_migrate /home/admin/MGMT-DELHI_Mig_Exp.tgz /opt/CPmds-R80.20/customers/MGMT-DELHI/CPsuite-R80.20/fw1

 

5) cma_migrate Command executed successfully, but on my newly created CMA am unable to see the policies or objects which are there in my Management Server. 

Anybody faced this issue before or is there any other way around to achieve my requirement.?

 

Command Output of cma_migrate FYR:

[Expert@PRIMARY-MDS:0]# cma_migrate /home/admin/MGMT-DELHI_Mig_Exp.tgz /opt/CPmds-R80.20/customers/MGMT-DELHI/CPsuite-R80.20/fw1

Your Multi-Domain Server should NOT be running while you import.
cma_migrate will now stop the Multi-Domain Server.
Do you want to continue [yes/no] ? yes
Stopping Domain Management Servers
Initialize stopping of Domain Management Servers: 1 out of 2
Initialize stopping of Domain Management Servers: 2 out of 2
[2] Done /opt/CPmds-R80.20/scripts/wrap_proc_run /opt/CPmds-R80.20/scripts/mdsstop_customer MGMT-DELHI
[1] + Done /opt/CPmds-R80.20/scripts/wrap_proc_run /opt/CPmds-R80.20/scripts/mdsstop_customer MGMT-SRV-BNG
Number of Domain Management Servers stopped so far: 2 out of 2
Removing Virtual IPs ..
Stopping Multi-Domain Server

Stop Search Infrastructure...
Stopping RFL ...
cpwd_admin:
successful Detach operation
Stopping Solr ...
cpwd_admin:
successful Detach operation
Stop SmartView ...
Stopping SmartView ...
cpwd_admin:
successful Detach operation
Stop Search Infrastructure...
Stop Log Indexer... MGMT-SRV-BNG
Stop SmartLog Server... MGMT-SRV-BNG
Stop Search Infrastructure...
Stop Log Indexer... MGMT-DELHI
Stop SmartLog Server... MGMT-DELHI
Stop Log Indexer...
cpwd_admin:
Process INDEXER (pid=63824) stopped with command "kill 63824". Exit code 0.
Stop SmartLog Server...
cpwd_admin:
Process SMARTLOG_SERVER terminated
evstop: Stopping product - SmartEvent Server
evstop: Stopping product - SmartEvent Correlation Unit
Check Point SmartEvent Correlation Unit is not running
cpwd_admin:
Process FWM terminated
cpwd_admin:
Process FWD terminated
Stopping CPM Server ...
cpwd_admin:
Process CPD terminated
cpwd_admin: cpWatchDog killed
Multi-Domain Server stopped
Starting Multi-Domain Server only
Starting cpWatchDog
Starting CPM Server ...
[1] 84696
CPM Server is running.
Start Search Infrastructure...
index mode was set to true
startsearch: dbsync does not run on Multi-Domain Security Management
cpwd_admin:
Process SOLR started successfully (pid=85453)
Starting RFL ...
cpwd_admin:
Process RFL started successfully (pid=85490)
Starting SmartView ...
cpwd_admin:
Process SMARTVIEW started successfully (pid=85553)
Start Log Indexer...
cpwd_admin:
Process INDEXER started successfully (pid=86232)
Start SmartLog Server...
cpwd_admin:
Process SMARTLOG_SERVER started successfully (pid=86830)

Multi-Domain Server Started
Waiting for CPM server...
Check Point Security Management Server is during initialization
Waiting for CPM server...
Waiting for CPM server...
Check Point Security Management Server is during initialization
Waiting for CPM server...
Check Point Security Management Server is running and ready
CPM server started

Are you sure you want to migrate the management at /home/admin/MGMT-DELHI_Mig_Exp.tgz
into the Domain Management Server /opt/CPmds-R80.20/customers/MGMT-DELHI/CPsuite-R80.20/fw1 [yes/no] ? yes

Verifying data before importing. Please wait ...
Source management version detected:
R80.20
======================================================================
>>> Executing Source Version Upgrade Path Checker

======================================================================
>>> Executing Source Version cma_migrate Path Checker

======================================================================
>>> Executing Domains Without Management Servers Test

======================================================================
>>> Executing Domains With No Hosting Multi Domain Servers Test

======================================================================
>>> Executing Enable For Global Use on cma_migrate Feature Test

======================================================================
>>> Executing Global Policy on Source Database Detector

======================================================================
>>> Executing Multiple Domain Management Servers with the same ICA Keys Detector

======================================================================
>>> Executing Firmware References Detector

======================================================================
>>> Executing VSX Objects Detector

======================================================================
>>> Executing Domain Servers Missing From Database

======================================================================
>>> Executing Missing Domain Server Directories

Pre-migrate verification ended successfully.
A log file was created: /opt/CPmds-R80.20/customers/MGMT-DELHI/CPsuite-R80.20/fw1/log/pre_migrate.elg

Proceeding with migration.


Migration completed successfully.

[Expert@PRIMARY-MDS:0]#

 

0 Kudos
5 Replies
Marco_Valenti
Advisor

is that even supported? can you move to sms to mdm from the same version? seems to be supported from different version but maybe someone from checkpoint can confirm or deny it

G_W_Albrecht
Legend
Legend

According to sk32506 upgrade_export command support on CMA this is supported - but i honestly would not try it without TAC involved...

CCSE CCTE CCSM SMB Specialist
Marcos_Perez
Participant

Hi,

im arriving at the same point as you did some weeks ago...did you manage to resolve your issue?

Cheers

Maarten_Sjouw
Champion
Champion

Moving from SMS to CMA is NOT supported on a R80 version below R80.40
The R80.40 will support the different directions, from SMS to CMA and CMA to SMS plus CMA to CMA and SMS to SMS.
Regards, Maarten
Marcos_Perez
Participant

hey maarten,

too bad...

thanks for you answer!!! Cheers

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events