Migrating checkpoint R80.30 MDS to R80.40 MDS with new ip address & domain name

[sid786]

Hi All,

We are performing migration & upgrade of R80.30 MDS to R80.40 MDS with new IP address & domain name. (Migrating MDS from one DC to another DC)

We are using latest deployment agent, upgrade tool on both MDS.

This MDS is consist of 05 CMA (all objects i.e. MDS & CMA are in same subnet in old as well as in new setup)

we are following below document for migration.

Upgrading Multi-Domain Servers in High Availability from R80.20 and higher with Migration (checkpoin...

Issues :-

1. export & import works fine without any issues.

2. after import we were able to change CMA ip address for all (MDS1,MDS2,Logserver)

3. however post changing the IP address CMAs are not in sync however MDS objects are in sync.

4. on secondary CMA we are getting error "no active server present"

5. on primary CMA we are getting error "unable to connect to peer"

Note :- No firewall in between these 3 servers, all ports are open and we are able to telnet.

 owe are following below document for changing CMA IP address. this document is same for R80.40 as well.

Changing the IP Address of a Domain Management Server or Domain Log Server (checkpoint.com)

Please let me know how to resolve this issue ?

[_Val_]

If you are moving to a new IP address on both primary and secondary MDSs, it is best to break MGMT HA and move just primary MDS at the first stage, with re-installing the secondary, to set it up again from scratch. 

In your case, your new primary cannot connect to the secondary MDS new IP just because it does not know it. In the DB, the "old" secondary MDS IP address is still in use, hence you are failing on step 4.

[sid786]

Hi,

Thanks for suggesting this option however could you please suggest relevant commands to break exiting production MDS HA ? 

Also even after breaking the HA do you think that existing IP entries for secondary MDS & MLM will get removed from DB