Migrating standalone installation to new server

[iamwiz82]

I have a standalone Smartcenter/Firewall box running SPLAT R60 that I need to move to a new server. I would like to keep the same IP scheme and computer name and was wondering what would be the steps I should take?

I imagine it would be like this:

Build new server using NGX CD
Use backup_export on the old server
Use backup_import on the new server
Re-create routing tables

These are the steps I have taken so far, but I have not had much luck in testing. When I try to connect to the new server in my test enviro I get a message saying no valid licenses were found. I had assumed that since I was using the backup tools the license would follow and work, but I guess I was mistaken.

[dsb.nepo]

take a look at this document
http://www.cpug.org/check_point_reso...Deployment.htm

[iamwiz82]

I assume I just ignore most of the steps after 6 since I am not going to a distributed setup?

[dsb.nepo]

sorry, it was my mistake.

I have never tried with backup_export?

use the latest cpexport utility from the CP website, and export your config.
use this script to export the routing table Copying static routes from R55 to R62
install the new machine with same IP in separate network
choose products to install and select have exported config
transfer the routing script to the machine

The new server should now work as expected if no licence upgrade is needet

[iamwiz82]

Whoops, I meant upgrade_import and upgrade_export.

I cannot seem to find a cpexport on Checkpoint's site.

[dsb.nepo]

Yes, you are right, sorry for my mistake (my thought are already at vacation).

Exactly steps are discribed at the CheckPoint_R6?_UpgradeGuide.pdf, in your case 'Upgrading a Standalone Deployment' (SPLAT).
If this is your first ugrade, take the time in a clean lab and make shure everything is working (it is not hard to setup a separate network with some old pc's and even test SecuRemote/SecureClient...).

For the missing License, you can check the license with the SmartCenter or with the cplic command (make shure IP's are the same) eventualy they are there but not attached.