Hi! Guys,
I have a Management Server running in R80.20 Gaia. Also, I have an MDS setup with multiple CMAs running on it.
Now am trying to Migrate my Management Server's Database (policies & objects) to a new CMA in my MDS. I will keep the same hostname & IP-address as like in the Management Server on my CMA.
To achieve this, i followed the below steps:
1) Took a Migrate Export file from the Management Server
# ./migrate export MGMT-DELHI_Mig_Exp
2) On my MDS Setup, i have created a CMA from the mgmt_cli utility & didn't started it for the first time.
[Expert@PRIMARY-MDS:0]# mgmt_cli add domain name Domain-DELHI servers.ip-address 10.10.10.20 servers.name MGMT-DELHI servers.multi-domain-server PRIMARY-MDS servers.skip-start-domain-server true
3) Copied the Migrate Export File (MGMT-DELHI_Mig_Exp.tgz) on to the MDS device in /home/admin directory.
4) Using the cma_migrate command, am trying to import the Migrate Export file on the newly created CMA.
[Expert@PRIMARY-MDS:0]# cma_migrate /home/admin/MGMT-DELHI_Mig_Exp.tgz /opt/CPmds-R80.20/customers/MGMT-DELHI/CPsuite-R80.20/fw1
5) cma_migrate Command executed successfully, but on my newly created CMA am unable to see the policies or objects which are there in my Management Server.
Anybody faced this issue before or is there any other way around to achieve my requirement.?
Command Output of cma_migrate FYR:
[Expert@PRIMARY-MDS:0]# cma_migrate /home/admin/MGMT-DELHI_Mig_Exp.tgz /opt/CPmds-R80.20/customers/MGMT-DELHI/CPsuite-R80.20/fw1
Your Multi-Domain Server should NOT be running while you import.
cma_migrate will now stop the Multi-Domain Server.
Do you want to continue [yes/no] ? yes
Stopping Domain Management Servers
Initialize stopping of Domain Management Servers: 1 out of 2
Initialize stopping of Domain Management Servers: 2 out of 2
[2] Done /opt/CPmds-R80.20/scripts/wrap_proc_run /opt/CPmds-R80.20/scripts/mdsstop_customer MGMT-DELHI
[1] + Done /opt/CPmds-R80.20/scripts/wrap_proc_run /opt/CPmds-R80.20/scripts/mdsstop_customer MGMT-SRV-BNG
Number of Domain Management Servers stopped so far: 2 out of 2
Removing Virtual IPs ..
Stopping Multi-Domain Server
Stop Search Infrastructure...
Stopping RFL ...
cpwd_admin:
successful Detach operation
Stopping Solr ...
cpwd_admin:
successful Detach operation
Stop SmartView ...
Stopping SmartView ...
cpwd_admin:
successful Detach operation
Stop Search Infrastructure...
Stop Log Indexer... MGMT-SRV-BNG
Stop SmartLog Server... MGMT-SRV-BNG
Stop Search Infrastructure...
Stop Log Indexer... MGMT-DELHI
Stop SmartLog Server... MGMT-DELHI
Stop Log Indexer...
cpwd_admin:
Process INDEXER (pid=63824) stopped with command "kill 63824". Exit code 0.
Stop SmartLog Server...
cpwd_admin:
Process SMARTLOG_SERVER terminated
evstop: Stopping product - SmartEvent Server
evstop: Stopping product - SmartEvent Correlation Unit
Check Point SmartEvent Correlation Unit is not running
cpwd_admin:
Process FWM terminated
cpwd_admin:
Process FWD terminated
Stopping CPM Server ...
cpwd_admin:
Process CPD terminated
cpwd_admin: cpWatchDog killed
Multi-Domain Server stopped
Starting Multi-Domain Server only
Starting cpWatchDog
Starting CPM Server ...
[1] 84696
CPM Server is running.
Start Search Infrastructure...
index mode was set to true
startsearch: dbsync does not run on Multi-Domain Security Management
cpwd_admin:
Process SOLR started successfully (pid=85453)
Starting RFL ...
cpwd_admin:
Process RFL started successfully (pid=85490)
Starting SmartView ...
cpwd_admin:
Process SMARTVIEW started successfully (pid=85553)
Start Log Indexer...
cpwd_admin:
Process INDEXER started successfully (pid=86232)
Start SmartLog Server...
cpwd_admin:
Process SMARTLOG_SERVER started successfully (pid=86830)
Multi-Domain Server Started
Waiting for CPM server...
Check Point Security Management Server is during initialization
Waiting for CPM server...
Waiting for CPM server...
Check Point Security Management Server is during initialization
Waiting for CPM server...
Check Point Security Management Server is running and ready
CPM server started
Are you sure you want to migrate the management at /home/admin/MGMT-DELHI_Mig_Exp.tgz
into the Domain Management Server /opt/CPmds-R80.20/customers/MGMT-DELHI/CPsuite-R80.20/fw1 [yes/no] ? yes
Verifying data before importing. Please wait ...
Source management version detected:
R80.20
======================================================================
>>> Executing Source Version Upgrade Path Checker
======================================================================
>>> Executing Source Version cma_migrate Path Checker
======================================================================
>>> Executing Domains Without Management Servers Test
======================================================================
>>> Executing Domains With No Hosting Multi Domain Servers Test
======================================================================
>>> Executing Enable For Global Use on cma_migrate Feature Test
======================================================================
>>> Executing Global Policy on Source Database Detector
======================================================================
>>> Executing Multiple Domain Management Servers with the same ICA Keys Detector
======================================================================
>>> Executing Firmware References Detector
======================================================================
>>> Executing VSX Objects Detector
======================================================================
>>> Executing Domain Servers Missing From Database
======================================================================
>>> Executing Missing Domain Server Directories
Pre-migrate verification ended successfully.
A log file was created: /opt/CPmds-R80.20/customers/MGMT-DELHI/CPsuite-R80.20/fw1/log/pre_migrate.elg
Proceeding with migration.
Migration completed successfully.
[Expert@PRIMARY-MDS:0]#
