cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post
Highlighted

Migrate MDS User administrator from R77.30 to R80.20

Jump to solution

Hi All,

We have R77.30 MDS where we have more than 500 administrators. So how can I migrate these User administrator from R77.30 to R80.20?

Thanks

 

 

 

1 Solution

Accepted Solutions
Highlighted

Re: Migrate MDS User administrator from R77.30 to R80.20

Jump to solution

Hi @Rajput_Arvind,

As far as I know, administrators cannot be exported under R70.30 and imported under R80.20 manually.

The users are included in the database in R80.x.

Just an idea!

With this method all admin users will be added to R80.x MDS server:

  1. Run mds_setup to export all MDS and CMA databases on R77.30
    # ./mds_setup
  2. Enter 4 when this menu shows:

    (4) Export current Multi-Domain Server

  3.  Import all CMA's and MDS on R80.x LAB server under VMWare
     $MDSDIR/scripts/mds_import.sh <path_exported_database>/exported_mds.DDMMYYY-HHMMSS.tgz
  4. Now export all admin users via management CLI on the LAB server
    -> Here you have to create a script with the following commands:-)
    # mgmt_cli show administrators

    # mgmt_cli show administrator...
  5. Import all admin user on your real server via mangement CLI
    # mgmt_cli add administrator...

View solution in original post

Tags (1)
7 Replies
Highlighted
Admin
Admin

Re: Migrate MDS User administrator from R77.30 to R80.20

Jump to solution
These users should be migrated as part of migrating the entire MDS.
Are you trying to migrate these to a completely different MDS?
Highlighted

Re: Migrate MDS User administrator from R77.30 to R80.20

Jump to solution
We are not migrating the entire MDS in one go. We have new Smart-1 Appliance. and we will set it up parallel with existing MDS. Then we will migrate one domain at a time to new MDS. In this case, how can I migrate MDS users to new MDS?
0 Kudos
Highlighted
Admin
Admin

Re: Migrate MDS User administrator from R77.30 to R80.20

Jump to solution
The users for each relevant CMA/Domain would be migrated with the domain itself.
You don't really have 500+ users defined at the global level, do you?
In any case, you can export a list of admins per this SK: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...
Not sure about the import process.
Highlighted

Re: Migrate MDS User administrator from R77.30 to R80.20

Jump to solution
Hi PhoneBoy,

We have so many Administrator created on MDS level where we have defined which administrator can access which domain. So does CMA export contain all the relevant administrator information.
0 Kudos
Highlighted

Re: Migrate MDS User administrator from R77.30 to R80.20

Jump to solution

Hi @Rajput_Arvind,

As far as I know, administrators cannot be exported under R70.30 and imported under R80.20 manually.

The users are included in the database in R80.x.

Just an idea!

With this method all admin users will be added to R80.x MDS server:

  1. Run mds_setup to export all MDS and CMA databases on R77.30
    # ./mds_setup
  2. Enter 4 when this menu shows:

    (4) Export current Multi-Domain Server

  3.  Import all CMA's and MDS on R80.x LAB server under VMWare
     $MDSDIR/scripts/mds_import.sh <path_exported_database>/exported_mds.DDMMYYY-HHMMSS.tgz
  4. Now export all admin users via management CLI on the LAB server
    -> Here you have to create a script with the following commands:-)
    # mgmt_cli show administrators

    # mgmt_cli show administrator...
  5. Import all admin user on your real server via mangement CLI
    # mgmt_cli add administrator...

View solution in original post

Tags (1)
Highlighted

Re: Migrate MDS User administrator from R77.30 to R80.20

Jump to solution

With more than 500 admin users you should clean up a little bit:-)

Tags (1)
0 Kudos
Highlighted
Employee++
Employee++

Re: Migrate MDS User administrator from R77.30 to R80.20

Jump to solution

Check Point recommends upgrading the MDSM by exporting and importing the entire server. Gradual upgrade from R77.30 to R80.x supported, but not the most recommended way. 

This being said there is no way to export/import admins only. It’s manual work all together. 

0 Kudos