Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Harmesh_Yadav
Collaborator
Jump to solution

Migration Management server from smart 410 to VMware

Dear Team,

we are using Smart-1 410 Device for managing existing checkpoint devices , It having licenses of 10 Gateways because of Hardware limit and license limit we have bought new license for 25 gateways -CPSM-NGSM25- It will install in VMWare -

We are going to migrate old setup to new one

Currently 8 gateways already registered with old management . remaining gateways we are going to implement soon


OS is Gaia 80.30

I wil follow this steps

1. Install same OS and Hotfix , do initial configuration

2. get migrate export file from old MGMT

3. Import migrate export file in New MGMT server

In production environment we can not move all gateways in one


So need suggestion from your side

what steps i should follow which will help to do this activity in minimum downtime and less challenges.

Correct me if i am wrong

Regards,

Harmesh Yadav

Harmesh Yadav
1 Solution

Accepted Solutions
HeikoAnkenbrand
Champion Champion
Champion

Hi @Harmesh_Yadav,

It is no problem that the management server is offline for some time. Therefore the action is not time critical.

1) Install the migrate export tools R80.30  on the Smart1 appliance.

2) Export the SMS database via "migrate export"
# $FWDIR/bin/upgrade_tools/migrate_export  <output tgz file>

>>>  As described! Install a new SMS under VMWare and transfer the config in a LAB environment. Use the same IP as the old Smart 1 410 appliance. You can use a different VMWare network for this. Therefore there is no IP address conflict with the old management server.

3) Install the open server as SMS on VMWare ESX, install same JHF and install the R80.30 migrate tool. Use the same IP as the old Smart 1 410 appliance.

4) Import the database via "migrate import"
# $FWDIR/bin/upgrade_tools/migrate import <export tgz file>

>>> Now make a poweroff on the Smart 1 410

>>> Now add the new VMWare SMS to the correct VMWare network.

Done😀

 

➜ CCSM Elite, CCME, CCTE ➜ www.checkpoint.tips

View solution in original post

8 Replies
HeikoAnkenbrand
Champion Champion
Champion

Hi @Harmesh_Yadav 

Steps for R80.30:

1) Install the migrate export tools R80.30  on the Smart1 appliance.

2) Export the SMS database via "migrate export"
# $FWDIR/bin/upgrade_tools/migrate_export  <output tgz file>

3) Install the open server as SMS on VMWare ESX, install same JHF and install the R80.30 migrate tool. Use the same IP as the old Smart 1 410 appliance.

4) Import the database via "migrate import"
# $FWDIR/bin/upgrade_tools/migrate import <export tgz file>

➜ CCSM Elite, CCME, CCTE ➜ www.checkpoint.tips
Harmesh_Yadav
Collaborator

 Thanks for your reply - Appreciate it

 

Post this migration

Actually what i am asking that i have 8 Gateway which is live in production so i should move it to new management - How can i move it with minimum downtime

should i do - in one shot or one by one ?

Harmesh Yadav
0 Kudos
Chris_Atkinson
Employee Employee
Employee

Are you reusing the hostname/IP?

sk86521 can help depending on the scenario.

 

CCSM R77/R80/ELITE
0 Kudos
Harmesh_Yadav
Collaborator

Thanks for your reply - I will use same IP address

Harmesh Yadav
0 Kudos
HeikoAnkenbrand
Champion Champion
Champion

Hi @Harmesh_Yadav,

It is no problem that the management server is offline for some time. Therefore the action is not time critical.

1) Install the migrate export tools R80.30  on the Smart1 appliance.

2) Export the SMS database via "migrate export"
# $FWDIR/bin/upgrade_tools/migrate_export  <output tgz file>

>>>  As described! Install a new SMS under VMWare and transfer the config in a LAB environment. Use the same IP as the old Smart 1 410 appliance. You can use a different VMWare network for this. Therefore there is no IP address conflict with the old management server.

3) Install the open server as SMS on VMWare ESX, install same JHF and install the R80.30 migrate tool. Use the same IP as the old Smart 1 410 appliance.

4) Import the database via "migrate import"
# $FWDIR/bin/upgrade_tools/migrate import <export tgz file>

>>> Now make a poweroff on the Smart 1 410

>>> Now add the new VMWare SMS to the correct VMWare network.

Done😀

 

➜ CCSM Elite, CCME, CCTE ➜ www.checkpoint.tips
Harmesh_Yadav
Collaborator

Thanks for your reply ...

Means as you said it will be done in one shot right ?

For SIC reset will be required in this case ?

and if VMWARE Server side if IP schema will be different and if in this activity client dont want to give same ip and use vmware zone available  ip so is it possible ?

And GAIA GUI Configuration i should do same - what i will do i will copy cli command and do same configuration in NEW MGMT and name of interface i will change if require --- it is ok right ?

 

Regards,

Harmesh Yadav

 

Harmesh Yadav
0 Kudos
Harmesh_Yadav
Collaborator

HI, i have requirement to get all log in new MGMT VM which is present in old MGMT so what wil be the process for that ?

Harmesh Yadav
0 Kudos
Chris_Atkinson
Employee Employee
Employee

Did you use migrate export -l ?

Exports and imports the Check Point logs without log indexes in the $FWDIR/log/ directory.

 

 

Note - The command can export only closed logs (to which the information is not currently written).

 

Refer also sk92440

 

CCSM R77/R80/ELITE
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events