Migrating SmartCentre to new IP Address?

[soundsfuzzy]

Hello

Need some help with procedures on moving a SmartCentre to a new IP address.

I have read that one way i should create a Secondary SmartCentre with the new IP, this will require a eval license for HA. But from there it gets a bit lost.

There is a old pdf document from Checkpoint outlining promoting the Secondary to a Primary, that goes like this....

1 Select either an existing or a newly created Secondary SmartCenter Server and synchronize it with your other SmartCenter Servers. From the Secondary Smart Center Server perform the following manipulations:
2 Stop all running Check Point services by running the cpstop command.
3 Manually adjust the objects_5_0.C file as follows:
A Edit the former Primary Object definitions:
B Edit the selected Secondary Object definitions:
4 Run the cpprod_util FwSetPrimary 1 command to change the registry thereby setting this Server to the Primary Server.
5 Remove the $FWDIR/conf/mgmtha* files. They contain information about the current Secondary settings. These files will be recreated when you start the Services.
6 Make sure you have the mgmtha license on the newly promoted SmartCenter Server and run the cpstart command.
7 Via SmartDashboard, remove all occurrences of the old Primary Management object using the Where Used utility (right click on the object and select Where Used). Delete the old Primary Management Object
8 Check the definitions of Masters and Loggers according to the configuration; either Centrally Managed or Locally Managed.
9 Synchronize your other servers from the newly promoted SmartCenter Server.

What is the right way of doing this? or the way that will work? I do want the same server name (Windows) is that possible? And is it possible to rename the checkpoint host name?

Regards
AJ

[northlandboy]

You could just use upgrade_export/upgrade_import.

Note your licenses will need to be re-addressed.

[soundsfuzzy]

If i do a export / upgrade of the current smartcentre it will take across the current ip of the smartcentre.

Changing the the license ip is the easy part.

[northlandboy]

Are you sure about that? I was under the impression it will change the mgmt object to reflect the new system. That's what it does with P-1 when you migrate CMAs, and it's more or less the same processes going on underneath. I haven't done an upgrade_export/import for a couple of years now though.

[soundsfuzzy]

I hope it changes the objects ip addresses. I think i will run up the new SmartCenter via upgrade Export on the same ip address and then change the license ip addresses import them via SmartUpdate and see!

[derspot]

let us know if it worked, on paper it should work , but i ran into a nightmare doing this prodecure for our client. THe freakin upgrade_import gives freakin messages ( typicall for CP ) that are not in the bug database ..oops i meant the SecureKnowledge.



Just make sure u have backups and bla bla bla.

btw If u have bought a CP product and u have the support option or whatever , can u call CP and ask for phone support for things like that ?

[chillyjim]

Originally Posted by derspot

let us know if it worked, on paper it should work , but i ran into a nightmare doing this prodecure for our client. THe freakin upgrade_import gives freakin messages ( typicall for CP ) that are not in the bug database ..oops i meant the SecureKnowledge.

I've had very few problems with upgrade_export/import just mack sure you run the upgrade checker and fix what it tells you too.

Just make sure u have backups

Always!! I really stinks when that great system that's been running for months throws the hard drive when you reboot after the upgrade!

btw If u have bought a CP product and u have the support option or whatever , can u call CP and ask for phone support for things like that ?

Yes you can. You can also call in advance and ask to schedule a call back at the time you doing the upgrade.