Upgrading Mmgt from R55 on W2K to R60 on SLPAT

[kai11]

Is is possible to import the exported cp_db_configuration.tgz from a windows Smartcenter - Server into SPLAT - NGX ?

I tried to migrate our Management Server from R55 on Windows2000 to NGX R60 on Secure platform on a new server.

Using the restore - command on splat i get the error message : "Cannot complete the process due to package compression errors."

[Lackie]

What did you use to export. If it was upgrade_export, what version?

[andrew]

Cross-platform upgrades work. Make sure you're using the right tools.

Since you said restore, it sounds like you're either trying to use the restore tool with upgrade_export output, which won't work.

Restore and upgrade are not indentical. I imagine it is because exports contain policy and other settings for the FW modules, and backups/snapshots (which you use restore for) contain the preceding as well as operating system and operating system configuration.

[kai11]

i used the export - tool on the NGX R60 CD as described in the "Checkpoint_NGX_UpgradeGuide.pdf".

1 Insert the NGX R60 CD into the original SmartCenter Server.
2 Choose Export in Upgrade Options.
3 Select the destination path of the configuration (.tgz) file.
Wait while exporting database files.

But what i miss is how to import that export.tgz on SPLAT.

[kva.kva]

I think you can copy export.tgz to SPLAT and use command /opt/CPsuite-R60/fw1/bin/upgrade_tools/upgrade_import.

[kai11]

Thanks for your help!

using
/opt/CPsuite-R60/fw1/bin/upgrade_tools/upgrade_import.
works

[Ghost_Dog]

Good Morning People,
I am new to this forum as a poster but have been reading it for some time and find it a most valuable tool. So thank you in advance.

I too have used the upgrade_export tool in R55 to create a backup.tgz file for use by the NGX restore process.
I am getting the same error that Kai11 was getting.
I have read all the responces but have no idea how to get to the /opt/CPsuite-R60/fw1/bin/upgrade_tools/upgrade_import command.

I am a complete newbie on NGX so I appologise if this is considered a stupid question.

THanks,

IJ

[Lackie]

Ghost_Dog.

If you are upgrading to NGX you have to make sure that you are using the export command from NGX. You can find it on the NGX CD in one of the various directories depending on what platform you are doing it on.

To import you will also have to use the NGX import command. If you are using SPLAT then the import command will be found in /opt/CPsuite-R60/fw1/bin/upgrade_tools/upgrade_import

If you are using Windows then it will be found in C:\Windows\FW1\R60\fw1\bin\upgrade_tools\upgrade_i mport.exe, providing that you installed it in the default location.

[Ghost_Dog]

Hey Lackie,
I need to create a restore file from a R55 install running over windows 2000 server.
I have created this TGZ file using upgrade_export util on the windows platform.

I went to import it using splat in the console using the restore command. grabbed it from the tftp server and assumed this would work. I have read the posts which say to use the command that you have mentioned...but at the console I get unkonwn command when I try to CD to that directory.
The other commands that are mentioned here are also coming up as unkonwn on the SPLAT console.

Therein lies my problem.

Thanks,
IJ

[Ghost_Dog]

OK,
I have read that I need to be in expert mode which I have enabled.
Once I get to the above mentioned directory and type the upgrade_import command (Which is clearly there when I type "ls") I get "bash: upgrade_import: command not found"

Any ideas?

[kva.kva]

execute "./upgrade_import"

[Ghost_Dog]

Hey kva,
This is the output when I type the command
[Expert@cpfw1]# execute upgrade-import
bash: execute: command not found

Any ideas?

IJ

[Lackie]

execute wasn't part of the command that he wanted you to run. The command was just in the quotes. Plus, you used a dash (-) not an underscore (_) in the command. Run the following command from the directory that contains the upgrade_import file.

./upgrade_import

[Ghost_Dog]

Hey lackie,
OK....here is the story.
I have perfromed an upgrade export on the win2k box...then copied the file (I called it backup.tgz) to the NGX box. I then ran the command as you mentioned previously and this is the outcome.....

[Expert@cpfw1]# ./upgrade_import backup.tgz


The 'Import' operation will stop all Check Point services (cpstop).
Do you want to continue? (y/n) [n] ? y
Stopping Check Point Software...
Stopping Eventia Reporter...
Stopping the Eventia Reporter Server.
Stopping the Eventia Reporter Log Consolidator.
Stopping Eventia Reporter Database.
Note: Database shutdown takes a few minutes. rmdstart will fail while
shutdown is in progress.
Done.
Stopping SmartView Monitor daemon ...
SmartView Monitor daemon is not running
Stopping SmartView Monitor kernel ...
Driver is Down.
rtmstop: SmartView Monitor kernel is not loaded
FloodGate-1 is already stopped.
Cannot find pid of vpnd
VPN-1/FW-1 stopped
SVN Foundation: cpd stopped
SVN Foundation: cpWatchDog stopped
SVN Foundation stopped
Decompress the production machine's exported file...
./
configuration
cpshared/
cpshared/conf/
cpshared/conf/amon_cpshared.conf
cpshared/conf/build_number.conf
cpshared/conf/components_reg.conf
cpshared/conf/cp.license
cpshared/conf/cp.macro
cpshared/conf/ha.cps
cpshared/conf/hash.conf
cpshared/conf/os.cps
cpshared/conf/PersistenceConfig.C
cpshared/conf/PersistenceConfig.cps
cpshared/conf/Persistency.cps
cpshared/conf/proxy/
cpshared/conf/proxy/400malformed.html
cpshared/conf/proxy/400method.html
cpshared/conf/proxy/400version.html
cpshared/conf/proxy/404.html
cpshared/conf/proxy/500.html
cpshared/conf/proxy/mime.conf
cpshared/conf/RTMPersistenceConfig.C
cpshared/conf/sic_cert.p12
cpshared/conf/sic_policy.conf
cpshared/conf/statistical_oid.conf
cpshared/conf/upgrade_50.conf
cpshared/database/
cpshared/database/cpeps/
cpshared/database/cpeps/CPEPSTableDB_1.3.6.1.4.1.2620.1.14.9.9.5
cpshared/database/cpeps/CPEPSTableDB_1.3.6.1.4.1.2620.1.14.9.9.5FormatId
cpshared/database/cpeps/CPEPSTableDB_1.3.6.1.4.1.2620.1.14.9.9.5StringId
cpshared/database/cpeps/CPEPSTableDB_1.3.6.1.4.1.2620.1.14.9.9.5UniqeForma ts
cpshared/database/cpeps/CPEPSTableDB_1.3.6.1.4.1.2620.1.14.9.9.6
cpshared/database/cpeps/CPEPSTableDB_1.3.6.1.4.1.2620.1.14.9.9.6FormatId
cpshared/database/cpeps/CPEPSTableDB_1.3.6.1.4.1.2620.1.14.9.9.6StringId
cpshared/database/cpeps/CPEPSTableDB_1.3.6.1.4.1.2620.1.14.9.9.6UniqeForma ts
cpshared/database/cpeps/CPEPSTableDB_1.3.6.1.4.1.2620.1.14.9.9.7
cpshared/database/cpeps/CPEPSTableDB_1.3.6.1.4.1.2620.1.14.9.9.7FormatId
cpshared/database/cpeps/CPEPSTableDB_1.3.6.1.4.1.2620.1.14.9.9.7StringId
cpshared/database/cpeps/CPEPSTableDB_1.3.6.1.4.1.2620.1.14.9.9.7UniqeForma ts
cpshared/database/cpeps/CPEPSTableDB_1.3.6.1.4.1.2620.1.14.9.9.8
cpshared/database/cpeps/CPEPSTableDB_1.3.6.1.4.1.2620.1.14.9.9.8FormatId
cpshared/database/cpeps/CPEPSTableDB_1.3.6.1.4.1.2620.1.14.9.9.8StringId
cpshared/database/cpeps/CPEPSTableDB_1.3.6.1.4.1.2620.1.14.9.9.8UniqeForma ts
cpshared/database/cpeps/CPEPSTableDB_1.3.6.1.4.1.2620.1.14.9.9.9
cpshared/database/cpeps/CPEPSTableDB_1.3.6.1.4.1.2620.1.14.9.9.9FormatId
cpshared/database/cpeps/CPEPSTableDB_1.3.6.1.4.1.2620.1.14.9.9.9StringId
cpshared/database/cpeps/CPEPSTableDB_1.3.6.1.4.1.2620.1.14.9.9.9UniqeForma ts
cpshared/database/cpeps_verification
cpshared/database/cprid/
cpshared/database/cprid/cprid_keys/
cpshared/database/cprid/cprid_util_keys/
cpshared/database/cprid/cprid_util_keys/opsec_putkey.exe
/opt/CPshrd-R60/util/gtar: Skipping to next file header

gzip: stdin: invalid compressed data--format violated
/opt/CPshrd-R60/util/gtar: Child returned status 1
/opt/CPshrd-R60/util/gtar: Error exit delayed from previous errors
Error: Failed to execute '/opt/CPshrd-R60/util/gtar --extract --ungzip --exclude "*CKP_mutex*" --verbose --file backup.tgz' command
Error: Failed to decompress the exported file


I am gathering that I am going wrong at the export stage......but I have looked over the NGX CD and there doesn't appear to be any export tools on it.....

Any ideas?


IJ

[kva.kva]

Check md5 original and duplicate files.
How did you copy backup.tgz? By tftp? In this case don't forget to enable binary mode for upload file.

[Ghost_Dog]

Binary Mode worked. Coimpletely forgot about that one.
thanks so much for all your help!!!

IJ

[jbailey01]

Do you specify binary mode from the client or the server? If from the client, whats the switch?

Thanks

[Lackie]

Originally Posted by jbailey01

Do you specify binary mode from the client or the server? If from the client, whats the switch?

Thanks

When you are connected to the FTP server before you get the file, type the command 'bin' (without quotes).

[jbailey01]

Thanks, I'll give it a shot.