CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Installing And Upgrading
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2006-07-26
Junior Member
 
Join Date: 2006-07-26
Posts: 6
Rep Power: 0
Souly has an average reputation (10+)
Default Solaris Management Server Move Using upgrade_import Problems - HELP

Hi,
Would like some advice on the following please.

Currently we have FW NG R55 management server running on a solaris server.
We want to move to new hardware/new ip/solaris 10/FW NGX 6.1.

We have the server running with solaris 10 installed and ready.

We have tried the following but with no success:

Ran upgrade_export on the current management server.
Installed NGX 6.1 on the new server. Could connect fine etc with blank config. Ran upgrade_import on the new server and imported the old config, import ran fine. At first we could connect to the management server on its new IP, and could see all the objects rules etc, then disconnected.
Now we can't (I'm guessing this is because the object doesn't exist in the old db, but not sure why we could connect the first time!!).

I've uninstalled CP products and reinstalled using the option during the install using upgrade_export file and that failed!!

1) What we would like to do is migrate/upgrade the old config onto the new server BUT the new server has a different hostname and IP? Is this possible with upgrade_export?

2) If not could someone suggest how we would best achieve this without having to manually create every object/policy? would cp_merge help?

3) would it be possible to use dbedit to create the new management server in the db so we could connect? If so some pointers would be good?

Any help would be appreciated.

Many Thanks

Souly
Reply With Quote
  #2 (permalink)  
Old 2006-07-26
Senior Member
 
Join Date: 2005-08-29
Location: Upstate NY
Posts: 1,660
Rep Power: 5
chillyjim has an average reputation (10+)
Send a message via AIM to chillyjim Send a message via Skype™ to chillyjim
Default Re: Solaris Management Server Move Using upgrade_import Problems - HELP

This might be of help

Edit the objects_5_0.C file and search for the original IP address of the management server and change it to the new IP address. Make sure that you are changing the IP address for the correct object. We suggest not using notepad or wordpad to make this change as they tend to mangle the file. Use the guiDBEdit utility, VI(M), or UltraEdit to make this change.
Reply With Quote
  #3 (permalink)  
Old 2006-07-26
Junior Member
 
Join Date: 2006-07-26
Posts: 6
Rep Power: 0
Souly has an average reputation (10+)
Default Re: Solaris Management Server Move Using upgrade_import Problems - HELP

Hi Chilly,
I did try that but to no avail.
I've answered my own question though this afternoon.
Got it all working using cp_merge and fwm dbexport/import.
Had to edit a couple of th policies using vi but all seems to be working fine now.

Thanks for your advice anyway :)

Cheers
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 12:13.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0