1) Backup the management database before using this commands
2) Change gateway or cluster member management IP
# vsx_util change_mgmt_ip
3) Change the gateway / cluster member management IP subnet
# vsx_util change_mgmt_subnet
>>> With some versions I had the problem that the subnet mask had to be changed, otherwise the broadcast address would not be set. So I set it to a face address and then to a real subnet mask again.
4) Create a VSX policy that contains the VSX object.
5) Restart the Security Management server.
6) Perform the relevant changes on VSX gateway as described in the SK.
>>> Change the management interfaces on both gateways Web GAIA:
set vsx off
Web GAIA changes
set vsx on
>>> Or use the CLISH to change the management interface.
7) The user must get a new license. If the user is not using central licenses then the licenses must be updated.
>>> Update the license.
8 ) Manually reinstall the VSX policy.
➜ CCSM Elite, CCME, CCTE ➜ www.checkpoint.tips