- Products
- Learn
- Local User Groups
- Partners
- More
Welcome to Maestro Masters!
Talk to Masters, Engage with Masters, Be a Maestro Master!
Join our TechTalk: Malware 2021 to Present Day
Building a Preventative Cyber Program
Be a CloudMate!
Check out our cloud security exclusive space!
Check Point's Cyber Park is Now Open
Let the Games Begin!
As YOU DESERVE THE BEST SECURITY
Upgrade to our latest GA Jumbo
CheckFlix!
All Videos In One Space
Hi Checkmates,
Has anyone successfully performed an MDS migration and also changed the ip addess of MDS?
if so do you knows how to import the mdss.json file for changing the ip address of a Multi-Domain Servers to be imported into R80.40
reading the checkpoint documentation, the following parameter should be used to change the ip addess
./migrate_server import -v R80.40 -skip_upgrade_tools_check -change_ips_file /var/log/mdss.json /<Full Path>/Primary_<Name of Exported File>.tgz
however when this parameter is entered the following appears
The flag '-change_ips_file' is obsolete. Create the required file /var/log/mdss.json with the new IP address(es) and run the import again.
the question is how do we proceed to change the ip addess before importing the database, is there a workaround?
Thanks
Just contact TAC to get this resolved asap !
reading the checkpoint documentation, the following parameter should be used to change the ip addess
Where did you find that ? In sk156072 and sk163814 i read very different commands...
in step 10 on this link
10. Required JSON configuration file
On the Primary R80.40 Multi-Domain Server, import the databases
You did not mention that you have MDS configured in Management HA - this legacy option usually creates a lot of headaches... This is a situation when TAC is needed very badly !
The CP documentations for HA MDS migration needs to be reviewed and updated, even the previous documentations for older version of R80.X has this flag '-change_ips_file'
Better not use Management HA - there could be a need for global scale MDS/MDM deployments but this only concerns a very small number of target customers and alternatives are also available. With SMS usually installed in a VM, Management HA is now legacy only, similar to the most dreaded Full Management HA ☹️.
Did you try to run the command with json file in the command line but without the mentioned flag?
command has been entered has this
./migrate_server import -v R80.40 -skip_upgrade_tools_check -change_ips_file /var/log/mdss.json /var/log/Export-database
I understand that 🙂 Asking if you did try going without the mentioned flag while leaving everything else as it is
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY