Windows R65 SmartCenter to SPLAT R65 Smartcenter problems (import issue)

[remkolodder]

Hello all,

Does somebody have pointers on how to solve the following:

I am currently maintaining A windows R65 smartcenter, which I would like to migrate over to SPLAT R65 (this in order to get my backupserver up and running as well, that is already running SPLAT but cannot synchronise with the Windows smartcenter for some reason).

I made a backup with the most recent ngx utilities "Upgrading to NGX R65" found on the checkpoint website (using upgrade_export and upgrade_import).

The backup succeeds and I tranfered it through SCP towards a staging host from which I copied the backup to the destination SmartCenter, i then did the following:

tools/upgrade_import -d ./srvmgmt.tgz


The 'Import' operation will stop all Check Point services (cpstop).
Do you want to continue? (y/n) [n] ? y
[ 5326 2002728672]@srv-mgmt[1 Oct 11:51:11] GetExecPath: Exec dir = tools
[ 5326 2002728672]@srv-mgmt[1 Oct 11:51:11] AppendPathEnvVar: PATH=/opt/CPinfo-10/bin:/opt/spwm/bin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/opt/CPshrd-R65/bin:/opt/CPshrd-R65/util:/opt/CPsuite-R65/fw1/bin:/opt/CPsuite-R65/fg1/bin:/opt/CPPIconnectra-R65/bin:/opt/CPrt-R65/bin:/opt/CPadvr-R65/bin:/opt/CPuas-R65/bin:/opt/CPppak-R65/bin:/var/backups/tools
Stopping Check Point Software...
cpwd_admin: Failed to get response from cpWatchDog
cpwd_admin: Failed to get response from cpWatchDog
cpwd_admin: Failed to get response from cpWatchDog
evstop: Unable to find CpWatchDog - run cpstart
Stopping SmartView Monitor daemon ...
SmartView Monitor daemon is not running
Stopping SmartView Monitor kernel ...
Driver is Down.
rtmstop: SmartView Monitor kernel is not loaded
FloodGate-1 is already stopped.
This operation may take up to 2 minutes
UserAuthority: Stopping driver
UserAuthority: Stopped
Cannot find pid of vpnd
VPN-1/FW-1 stopped
SVN Foundation: cpd is not running
SVN Foundation: cpWatchDog is not running
SVN Foundation stopped
=========== BEGIN INTERESTING PART ===========
Decompressing the exported file...
[ 5326 2002728672]@srv-mgmt[1 Oct 11:51:16] DecompressImportedFile: Error >> Failed to copy /var/backups/./srvmgmt.tgz to /opt/CPsuite-R65/fw1/tmp/upgrade_temp_dir
Error: Failed to decompress the exported file


Manually copying the file from /var/backups to the mentioned directory works fine, as well as manually extracting the contents.

Please show me anypointer that you might have so that I can resolve this issue.

Thanks in advance!

[mcnallym]

Failed to copy /var/backups/./srvmgmt.tgz

is the problem. I take it that the file is just called srvmgmt.tgz and is in /var/backups

Try running without the ./ infront of the filename

[remkolodder]

Hello,

Thank you for your reply; sadly (for me) I already did that, and every other way to specify the file /path/./file simply represents /path/file directly. The problem does not change because of that (neither if you do /path/file or file directly)

Any other suggestions? :-)

Cheers
remko

[mcnallym]

What I normally do myself is create a dir called upgrade_tools under the $FWDIR/bin directory and place the upgrade_export upgrade_import files in there along with the actual file to be imported.

I then just cd into the $FWDIR/bin/upgrade_tools and just run

./upgrade_import filename.tgz

and it works. Saves having to mess about with paths.

I pick that directory as that is where you find the tools on a Nokia platform pre-installed.

[remkolodder]

Ok, let me give that a try, technically seen that should not matter too much but well OK lets see. I will update this post after the test (which is currently running).

So: I tested this and (as I feared); the same response occurs. :(

[mcnallym]

Can you paste the output again like on the first post from when you run with the file in the $FWDIR/bin/upgrade_tools directory

[remkolodder]

It's exactly the same error message as before; seems that I cannot copy information from my virtual machine to this console, but I'd assure you that the error is the same.

Thanks,
Remko

[mcnallym]

I was after this part

[ 5326 2002728672]@srv-mgmt[1 Oct 11:51:16] DecompressImportedFile: Error >> Failed to copy /var/backups/./srvmgmt.tgz to /opt/CPsuite-R65/fw1/tmp/upgrade_temp_dir

which shouldn't be the same as the directory will be different.

It is looking to me as though is possibly a difference in the gzip being used. Have you downloaded the latest off the web or are you using the cd supplied utils on the Windows AND splat boxes

[remkolodder]

Well yes you are correct about the path, but I do not think that is relevant for the problem (I dont mean to offend you with that): The error is exactly the same (cannot copy srvmgmt.tgz to /opt/CPsuite-[...]).

I tried the CD version, I tried the version that got delivered with the installation and I tried the webversion for all machines (splat and windows), they do exactly the same, I replaced the gtar and gzip binaries as well so that the latest ones that I was able to find were going to work, all no avail [ I assume that a default installation should have the right binaries already on board for that ].

Cheers,
remko

[mcnallym]

Could you humour me and just do a binary mode FTP transfer as this is what I do and it always works for me.

Either you are getting a bad export, or the transfer process is corrupting the exported file.

[remkolodder]

Originally Posted by mcnallym

Could you humour me and just do a binary mode FTP transfer as this is what I do and it always works for me.

Either you are getting a bad export, or the transfer process is corrupting the exported file.

Hello,

I am not using FTP to transfer the files, I am using SFTP to transfer the files (or SCP for that matter). There is no distinction between ASCII and BINary mode in those cases.

[remkolodder]

OK I believe I have found the nagging issue.

My support party implied that I should not take some database revision files into account. Ofcourse that is not what I want, but then a light bulbed up "what if the backup file is larger then 2GB? which is an old limitation of filesystems", and indeed, when the file is 53MB everything goes smoothly.... :(

[mcnallym]

In that case you are getting a bad export, log a case with your Check Point support

[chuachongchee]

I would think its the exported config thats corrupted.. had such a problem once but was not able to instal policy..

try to download the latest upgrade_export from usercenter for your platform (windows/splat/ipso etc)

use upgrade_import on your machine to import, if it fails, use the updated upgrade_import, do remember to use the correct platform one too...