cpservers with same ip

[trinity]

This may be a stupid question but could someone tell me:

If an image was taken of the cp server and then restored on another device to be used on a test network. As the ip will remain the same on the test network will this have an effect on the original cpserver? - as in will it disable the original as the same cert key and ip have been used twice.

Thanks

[lodown]

On a regular basis I do an mds_backup and mds_restore on our Provider-1 production environment for the purposes of maintaining a lab. Both the production and lab servers are the same config including IP addresses and licenses and I haver never run in to an issue. Just make sure that the lab is on it's own lab network, unavailable to the rest of the network.

lodown

[mcnallym]

It works fine as the lab is normally isolated from your network. As such it cannot communicate with the live box.

It doesn't actually require an activation. Most people I believe do this anyway for there testing, such as when performing an upgrade etc.

[lammbo]

Additionally, since the licensed IP is the private IP, then nothing breaks when you change the Public interface IPs.

What I do for my lab after that is change the Public IPs to a Private range and attach the whole lab to the DMZ port of an edge box. On the edge box, I explicitly block all outbound FW-1 traffic so the 'lab' management server does not constantly send stuff to my live firewalls. This allows me to test 'external' traffic in the lab inbound and outbound. Ideal for testing not just CP changes, but all the lab servers can get to the outside world and patch via Windows Update, Righfax works, Call Manager and Unity work, etc.

Also, my edge box has wireless and I set that up so I can get to it from my desk and be 'in the lab'. Also a great way to test SecureRemote/SecureClient on those lab servers.

I'd say it's win-win as far as test networks go.

[chillyjim]

Originally Posted by trinity

This may be a stupid question but could someone tell me:

If an image was taken of the cp server and then restored on another device to be used on a test network. As the ip will remain the same on the test network will this have an effect on the original cpserver? - as in will it disable the original as the same cert key and ip have been used twice.

Thanks

It will not break anything, but it is a violation of the EULA.

[trinity]

Thanks guys for all the info, but I’ve just been told that I’m unable to use the same ip due to security reasons.
Problem is the only other option (I think) of creating a test lab (to mimic the live environment) would be to install a trial version which would have to be re-installed every month and clock reset.
However, my concern is that this may cause syncing issues with all the other nodes/servers. Is there any way round this? Do Checkpoiint have licenses for development purposes? Sorry I have tried to do a search on this but can’t seem to find much information.

[lammbo]

Originally Posted by trinity

Do Checkpoiint have licenses for development purposes?

Unfortunately (AFAIK), no. It would be very nice to see something like this happen, but I (and I'm sure most other people on this forum) have been asking for something like this for years. Last time I asked, I was officially told to buy more licenses for my lab.

[trinity]

Originally Posted by lammbo

Last time I asked, I was officially told to buy more licenses for my lab.

Hmm buying more licenses wouldnt be a problem if they weren't so expensive!

[lammbo]

Originally Posted by trinity

Hmm buying more licenses wouldnt be a problem if they weren't so expensive!

So say we all...