R61 to R70 import problem

[mheldens]

Hello,
We are migrating from a IPSO platform (R61) to SPLAT (R70).

I did an export using the following command on the R61:
In the directory " $FWDIR/bin/upgrade_tools"
./upgrade_export -d /var/tmp/my_export
The export completes succesfully.

The import is done with the following command on the SPLAT R70:
In the directory "$FWDIR/bin/upgrade_tools"
./upgrade_import /var/tmp/my_export.tgz

At the end of the import i get the message:
Error: Failed to read the configuration info of the production machine

What i already did: I delete all the files under: "$FWDIR/tmp"

Who can help me with this one!!??

Thank you, Maarten

[Routerkid1]

Copy your export file directly in to the $FWDIR/bin/upgrade_tools dir and try again. If that does not work try to create the upgrade _export again. If this does not work I fear you will need to upgrade to R65 from R61. Check the R70 upgrade guide on all the requirements from check point.

[chillyjim]

To upgrade to R70 you must use the R70 version of upgrade_export or you will have problems.

[mheldens]

Thanks guys for the response!!
I will try your suggestions tomorrow when I am back at work again.

Maarten
The Netherlands

[mheldens]

Unfortunately both options don't work.

When placing the upgrade_export R70 file on the R61 the first issue I encounter was "Permission denied". This was solved by the following command: "chmod 775 upgrade_export".
When executing the file, the following error occurred: "Exec format error. Wrong Architecture."
Maybe this has something to do that the file is coming from an SPLAT platform en executed on a IPSO!!??

The other option of placing the files directly in the upgrade_tools directory resulted in the same error: "Error: Failed to read the configuration info of the production machine"

Who has a clue to solve this?

Maarten

[chillyjim]

Yes the SPLAT binary will not run on IPSO (Linux vs. BSD).
Please download the the IPSO version.

[mheldens]

Originally Posted by chillyjim

Yes the SPLAT binary will not run on IPSO (Linux vs. BSD).
Please download the the IPSO version.

Thanks for helping me.
I tried to download the proper image •R70 Security Gateway and Management for IPSO
but i'm not allowed to.
Is there another way to retrieve the file?? Or does someone has the file for me??

[chillyjim]

If you are not allowed to download, that means your usercenter ID is not attached to an account with support.

If you do not have direct support, then you need to contact your reseller.
If you have direct support, then you need to contact the admin for your account and have your ID added to it.

If your account/ID is messed up (as does happen), call the main support number and select "Account Services" and they can help you.

[mheldens]

Originally Posted by chillyjim

If you are not allowed to download, that means your usercenter ID is not attached to an account with support.

If you do not have direct support, then you need to contact your reseller.
If you have direct support, then you need to contact the admin for your account and have your ID added to it.

If your account/ID is messed up (as does happen), call the main support number and select "Account Services" and they can help you.

Ok, thank you. I have the reseller on site tomorrow. I will ask them!
I will keep my progress posted here.

[mheldens]

Ok, we finally got the export working and is even successfully imported in de SMART-1-5 R70.

First of all, our reseller contacted Checkpoint to provide us with a proper upgrade_export tool. A R70 version for IPSO 4.01 (which is running on our current NOKIA IP350)
After that we placed the "upgrade_export" tool with SCP (using binary mode) on the box NOKIA. Note: when we used FTP, the file didn't work!!
Eventually the export run successfully and so did the import on the SMART-1-5 R70. The configuration looks perfect and no errors occurred during the import.
Now we are moving on to configure the 2 Checkpoint UTM-1 3073 in a cluster configuration!

Thanks again for your responses!
Maarten