Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
an_technical
Explorer

Change VSX cluster/gateway IP

Hi All,

 

I am following the article - sk92425 to change the VSX gateway and VSX cluster mgmt IP.

I see that by running vsx_util change_mgmt_subnet, I can also change the VSX gateway management IP on the VSX gateway.

Do I need to follow step 2, which is to Perform the relevant changes on VSX gateway / VSX cluster members running on Gaia OS?

0 Kudos
4 Replies
HeikoAnkenbrand
Champion Champion
Champion

1) Backup the management database before using this commands

2) Change gateway or cluster member management IP

    # vsx_util change_mgmt_ip

3) Change the gateway / cluster member management IP subnet

   # vsx_util change_mgmt_subnet

   >>> With some versions I had the problem that the subnet mask had to be changed, otherwise the broadcast address would not be set. So I set it to a face address and then to a real subnet mask again.

4) Create a VSX policy that contains the VSX object.

5) Restart the Security Management server.

6) Perform the relevant changes on VSX gateway as described in the SK.

    >>> Change the management interfaces on both gateways Web GAIA:
           set vsx off
        
        Web GAIA changes
           set vsx on
    >>> Or use the CLISH to change the management interface.

7) The user must get a new license. If the user is not using central licenses then the licenses must be updated.
    >>> Update the license.

8 ) Manually reinstall the VSX policy.

➜ CCSM Elite, CCME, CCTE ➜ www.checkpoint.tips
0 Kudos
an_technical
Explorer

Hi @HeikoAnkenbrand :

Thanks for your reply. I will perform steps on the gateway as well.

I have another question: Backup the management database before using these commands.

Will configuration backup be sufficient, or should I export the complete database using ./migrate_export?

0 Kudos
an_technical
Explorer

Anyone?

0 Kudos
HeikoAnkenbrand
Champion Champion
Champion

As a precaution, I would perform the following backups:
1) GAIA snapshot -> sk108902
2) "migrate server export" ->  sk135172

If it is an MDS, additionally:
3) "mds_backup" -> R82 Command Line Interface (CLI) Reference Guide - mds_backup

➜ CCSM Elite, CCME, CCTE ➜ www.checkpoint.tips
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events