Migration of a VSX HA Cluster from a SMS to a MDS Mgmt WITH R80.20

[John]

Hello,

We want to migrate an existing and running VSX HA Cluster with 2 VS from an SMS into an exisiting CMA on an MDS Mgmt, 

The SMS MGMT is running on R80.20 with Jumbo Take 47.

The MDS MGMT is running on R80.20 with Jumbo Take 33.

The MDS CMA already has multiple HA Clusters configured with multiple Policies, if this is relevant for this.

Is this possible in R80.20 to migrate a VSX HA Cluster from a SMS to a MDS ?

BR,

John

[PhoneBoy]

You can copy in the configuration from the SMS using something like this: https://community.checkpoint.com/t5/API-CLI-Discussion-and-Samples/Python-tool-for-exporting-importi...
You will have to manually recreate the gateway/VSX and (re)establish SIC with the MDM.
Not 100% sure this can be done without an outage.

[John]

The Policy has already been importet into the MDM.

We are just unsure how to migrate the VSX HA Cluster Object from the SMS to the MDM.

What steps are needed in order to migrate this Object into the MDM without losing the config on the VSX ?

If we create a new VSX Object in the MDM and use the same settings as on the SMS, will the VSX loose its config with the 2 configured VS Systems on it or will they stay ?

[Lari_Luoma]

Hi!

You cannot migrate VSX cluster from SMS to CMA. You will have to recreate it. I'm just running a similar project for a customer. To minimize downtime we have new hardware that we make the new VSX cluster and then use vsx_provisioning_tool to re-create the virtual systems. Let me know if you have any more questions.

[Maarten_Sjouw]

you can only migrate a SMS to a new CMA, not into a existing CMA, the same goes for the VS's, just run the migrate export on the SMS and import the complete export into a new CMA.

All you need to do before the import of the CMA is to make sure the nmae of the CMA is the same as the name of jet SMS object. And before the import issue the command: touch /AllowVsxMigration

[Lari_Luoma]

Hey Maarten,

Migrate export and import is not supported between SMS and CMA. Also in VSX environment it might need re-architecturing anyway. 

We do have a migrate import/export solution in QA for R80.20.