AnsweredAssumed Answered

What is the procedure to Migrate firewall from one management server to another?

Question asked by Abichal Shukla on Oct 5, 2018
Latest reply on Oct 6, 2018 by Abichal Shukla

Like • Show 1 Like1
Comment • 6

Hi,

We have 2 management server both having R77.30. So I have got a project to move 8 firewalls from one Management server to another.

Hence need a plan for this, can anyone help me regarding the same.

The version of both the management servers and all the firewalls in R77.30.

Regards,

Abi

No one else has this question

Outcomes

6 Replies

Dameon Welch-Abernathy Oct 5, 2018 3:30 PM
Mark Correct
Correct Answer
At a high level:
- If necessary, copy the relevant configuration from the old management
  For R77.30, you can use tools like
  Confwiz (unfortunately, no longer made available)
  odump/ofiller (available on the Internet)
  If this was R80, you would use: Python tool for exporting/importing a policy package or parts of it
- Reset SIC on the gateway
  Use cpconfig to do this--see Reset SIC On R80.10 Gateway? , which requires an outage.
  Alternatively use the procedure in sk86521 which does not (this is an Expert-level SK, must be obtained from TAC).
- Establish SIC from the Gateway Object on new Management server
- Push Policy
Like • Show 1 Like1
Actions
- Abichal Shukla @ Dameon Welch-Abernathy on Oct 5, 2018 4:09 PM
  Mark Correct
  Correct Answer
  Thanks for the reply .
  
  I have few question:-
  1. How am i going to change the IP of the Management server on the gateway?
  2. Do i need to reinstall the licence from the new management server to the gateways?
  3. As I have to move only few firewalls to new management server, is there any option to export/import particular policy package?
  Like • Show 0 Likes0
  Actions
  - Dameon Welch-Abernathy @ Abichal Shukla on Oct 5, 2018 4:09 PM
    Mark Correct
    Correct Answer
    1. Resetting the SIC effectively changes the Management IP.
    2. Depends on how the licenses are generated. If they are tied to the management, then you will have to, yes.
    3. I'm not sure if odump/ofiller allow partial import/exports or not. You'll have to read the documentation on the tool.
    Like • Show 1 Like1
    Actions
Will Hillis Oct 5, 2018 6:05 PM
Mark Correct
Correct Answer
Check out sk33751for cp_merge

cp_merge takes the SIC with it too...
Read the SK carefully...

Thoughts Dameon Welch-Abernathy
Like • Show 1 Like1
Actions
- Dameon Welch-Abernathy @ Will Hillis on Oct 6, 2018 5:07 AM
  Mark Correct
  Correct Answer
  cp_merge is another way to do it as well.
  Like • Show 1 Like1
  Actions
Abichal Shukla Oct 6, 2018 11:01 PM
Mark Correct
Correct Answer
Thanks a lot guys for your help
Will go through all this.
Like • Show 1 Like1
Actions

What is the procedure to Migrate firewall from one management server to another?

Outcomes

Related Content

Recommended Content