cancel
Showing results for 
Search instead for 
Did you mean: 
Post a Question

Create a Domain without startup?

In R80 how do you create a new domain but do not start it?  So far the GUI and the API automatically starts the new Domain after creation. 

5 Replies
Eran_Habad
Nickel

Re: Create a Domain without startup?

Hi Michael,

Currently in R80 this is not supported. We do plan to support it on future releases.

May I ask what is your use-case in which you don't want to start the new Domain automatically?

Eran

0 Kudos

Re: Create a Domain without startup?

In all the past versions we can export a Domain/CMA and import into a new MDS.  However the only way to do this is to build a new Domain on the new MDS and then do not start it.  We would then take the export from the old Domain, then take this export and import it into the new domain and then start it afterwards.  If you start the Domain before the import, the import will fail.  So this feature is a must for migrating Domains on at a time.  We also use this feature to move a Domain from one MDS to another.  When you try and run a cma_migrate it will tell you in the output to not start the domain.   Without this feature Check Point is going to make our migration to R80 impossible in the near future.  I can't believe Check Point would even consider releasing R80 without this working.  You will probably find we are not the only customer that uses this feature.  

0 Kudos

Re: Create a Domain without startup?

In the current R77.x environments the process to import a CMA one at a time has improved so it is not necessary to create the domain without first starting it.

If you look at the windows carefully you should see at the bottom of one an "Import Options" section which allows you to enter the full path to an export file.

Doing this correctly will import your CMA without having to create it without starting it.

While I'm not 100% sure this feature will be in R80 I doubt they would have removed it in a future release.

How To Migrate from Security Management Server to Domain Management Server

0 Kudos
Eran_Habad
Nickel

Re: Create a Domain without startup?

Hi,

To be more accurate -

It's not supported using the SmartConsole but it is supported using the APIs.

This is from the user manual -

Eran

Re: Create a Domain without startup?

That helps out a lot.  I did not see the option for "skip-start-domain-server".   I was using the directions from the "CP_R80_Multi-DomainSecurityManagement_AdminGuide.pdf" and it did not show this part.   I will give it a try.

Thank you!

From the "CP_R80_Multi-DomainSecurityManagement_AdminGuide.pdf"

To create a new Domain (add domain):

# mgmt_cli add domain name "<domain>" servers.ip-address "<ip_address>" servers.name "<domain_server>" servers.multi-domain-server "<multi_domain_server>"

0 Kudos