CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. Come to CPUG CON 2008 EUROPE in Switzerland on September 8th - 9th!
    Two days full of technical content for Check Point administrators in the beautiful Swiss Alps!
    We already have sign-ups from twelve different countries!
2. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 7/14, 8/25, 10/6, 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8.
3. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
4. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Disaster Recovery
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2007-10-31
mc_rockz mc_rockz is offline
Member
 
Join Date: 2007-06-19
Posts: 38
Rep Power: 0
mc_rockz has an average reputation (10+)
Default Import config to new Smart Center

Hi Guys,

I would like to know if i use the upgrade_import to a new smartcenter server do i need to Re-SIC the smartcenter and the gateway, Does the SIC certificate is also being exported when we use the upgrade_export tools?


appreciate your comment!

mc_rockz
Reply With Quote
  #2 (permalink)  
Old 2007-10-31
mcnallym mcnallym is offline
Senior Member
 
Join Date: 2007-06-04
Posts: 857
Rep Power: 2
mcnallym has an average reputation (10+)
Default Re: Import config to new Smart Center

Providing you keep the same hostname / ip adress then it should work without resiccing the connection. All of the certifciates and communication settings are exported.
Reply With Quote
  #3 (permalink)  
Old 2007-10-31
mc_rockz mc_rockz is offline
Member
 
Join Date: 2007-06-19
Posts: 38
Rep Power: 0
mc_rockz has an average reputation (10+)
Default Re: Import config to new Smart Center

Hi mcnallym

Yup same server actually, we are planning to upgrade our R55 smartcenter (win2k),

What we will do is.
1. Export the config file
2. run the cpclean to uninstall the R55
3. Install the R62 and import the config file.

By right it the SIC will still be estblished between the new R62 smartcenter and R55 cluster gateways. it should right?

Regards,
Mc_rockz
Reply With Quote
  #4 (permalink)  
Old 2007-11-01
mcnallym mcnallym is offline
Senior Member
 
Join Date: 2007-06-04
Posts: 857
Rep Power: 2
mcnallym has an average reputation (10+)
Default Re: Import config to new Smart Center

The SIC should be in the same state as when the config is exported.
Reply With Quote
  #5 (permalink)  
Old 2007-11-01
melipla melipla is offline
Senior Member
 
Join Date: 2006-01-25
Posts: 724
Rep Power: 3
melipla has an average reputation (10+)
Default Re: Import config to new Smart Center

Is cpclean the recommended uninstallation method? :)

Better ensure your upgrade_export (using the R62 version, right?) creates a valid export file before you uninstall your R55 data.
Reply With Quote
  #6 (permalink)  
Old 2007-11-01
mc_rockz mc_rockz is offline
Member
 
Join Date: 2007-06-19
Posts: 38
Rep Power: 0
mc_rockz has an average reputation (10+)
Default Re: Import config to new Smart Center

Hi,

I tried two upgrade_export (R55 and R62 Version), Both can be imported using R62 installation.


Regards,
Mc_rockz
Reply With Quote
  #7 (permalink)  
Old 2007-11-04
mc_rockz mc_rockz is offline
Member
 
Join Date: 2007-06-19
Posts: 38
Rep Power: 0
mc_rockz has an average reputation (10+)
Default Re: Import config to new Smart Center

Hi mcnallym,
I already finished upgrading my smarcenter to R62, everything is ok, except the smartview monitor sees the cluster load sharing firewall (R55 Nokia IP530) memory the total memory should be 1024 Mb but instead it can only see 256 mb. The smarview monitor is not enabled on the nokia checkpoint packages, but the web voyager recognize that it has a 1024 mb of ram.

Does anybody knows why?

Regards,
mc_rockz
Reply With Quote
  #8 (permalink)  
Old 2007-11-05
mcnallym mcnallym is offline
Senior Member
 
Join Date: 2007-06-04
Posts: 857
Rep Power: 2
mcnallym has an average reputation (10+)
Default Re: Import config to new Smart Center

Can you confirm that installed the HFA for R62 on the SMARTCenter and SMARTConsole.
Reply With Quote
  #9 (permalink)  
Old 2007-11-05
mc_rockz mc_rockz is offline
Member
 
Join Date: 2007-06-19
Posts: 38
Rep Power: 0
mc_rockz has an average reputation (10+)
Default Re: Import config to new Smart Center

Hi

Actually we have 3 firewalls 1 in UAT(NGFP3) and 2 in Production running cluster(NG AI R55 HFA_04, hotfix 093-build003), in UAT its ok the smartview monitor can see the actual real memory of 1gb. but for the clusters in the production smartcenter can only see 256mb.

regards,
Mc-rockz
Reply With Quote
  #10 (permalink)  
Old 2007-11-18
mc_rockz mc_rockz is offline
Member
 
Join Date: 2007-06-19
Posts: 38
Rep Power: 0
mc_rockz has an average reputation (10+)
Default Re: Import config to new Smart Center

hi,

I already know the cause of error memory reports it it a bug on the R55 running on the gateways, when we upgraded the gateways to R62, smartmonitor reports the correct memory installed on the firewall.

rgds,
Reply With Quote
  #11 (permalink)  
Old 2008-01-30
fizzkakz fizzkakz is offline
Junior Member
 
Join Date: 2007-10-18
Location: Melbourne, Australia
Posts: 19
Rep Power: 0
fizzkakz has an average reputation (10+)
Default Re: Import config to new Smart Center

Does an 'upgrade_import' on a SmartCentre server automatically capture all the license information or does this need to be done separately?
Reply With Quote
  #12 (permalink)  
Old 2008-01-30
chuachongchee chuachongchee is offline
Senior Member
 
Join Date: 2007-09-17
Location: Singapore
Posts: 151
Rep Power: 1
chuachongchee has an average reputation (10+)
Default Re: Import config to new Smart Center

License is automacatically exported/imported too..
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 19:54.


Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0