CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Management High Availability
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2006-05-24
Junior Member
 
Join Date: 2006-04-03
Posts: 15
Rep Power: 0
kai11 has an average reputation (10+)
Default Secondary Managment Station greyed out

I tried to configure a second Management Server in the Dashboard,

Checkpoint -> New Checkpoint -> host -> the "Secondary Management Station" Button is greyed out.

fw hastat on the management Server:
HOST NUMBER HIGH AVAILABILITY STATE
localhost HA not installed

I followed the upgrade-guide
Before migrating your original SmartCenter Server
1 On the original SmartCenter Server add rules that will allow the new SmartCenter
to access the modules it is managing. To do this create a SmartCenter object that
represents the new SmartCenter Server’s IP address:
Manage > Network Objects > New… > Check Point > Host/Gateway and in the
General Properties tab select Secondary SmartCenter Server in the Check Point Products section.


thx for your help
Reply With Quote
  #2 (permalink)  
Old 2006-05-24
Senior Member
 
Join Date: 2006-01-26
Location: Moscow, Russia
Posts: 706
Rep Power: 3
kva.kva has an average reputation (10+)
Default Re: Secondary Managment Station greyed out

If "SIC was established with the Secondary Management Server before selecting the "Secondary Management Station" parameter, under the Check Point Properties section, in the Secondary Management Server's host properties.", you'll need re-establish SIC.
http://secureknowledge.checkpoint.co....do?id=sk22212
Reply With Quote
  #3 (permalink)  
Old 2006-05-24
Junior Member
 
Join Date: 2006-04-03
Posts: 15
Rep Power: 0
kai11 has an average reputation (10+)
Default Re: Secondary Managment Station greyed out

thanks for your answer, but SIC is not established.

background info....
...i dont want to set up a second Management, i want to migrate the Management to an new Server with a different IP.
Reply With Quote
  #4 (permalink)  
Old 2006-10-01
Junior Member
 
Join Date: 2006-05-04
Posts: 21
Rep Power: 0
nairsunil7 has an average reputation (10+)
Default Re: Secondary Managment Station greyed out

Hi,

Check Point Management High/Availability is a feature of Enterprise Eition(and VPN-1 POwer). It is not available with the Express version and UTM version.
Sometimes, due to license restriction also will give the same issue. Check with evalauation or demo lic.

Best Regards,
Sunil
Reply With Quote
  #5 (permalink)  
Old 2006-10-01
Junior Member
 
Join Date: 2005-08-30
Posts: 7
Rep Power: 0
rgupta has an average reputation (10+)
Default Re: Secondary Managment Station greyed out

First you require a 'HA' license for your Secondary Management but in your case if you just want to build another Managemnt Server identical to your existing, the best way is to use 'upgrade_export'/'ugrade_import' related solutions. The backup Management Name and IP should be kept the same but of course the Secondary Management has to be off-network. Or if the IP and specifially name has to change, you may run into 'SIC' issues which are resolvable but have to be considered.
hth.
__________________
researcher
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 09:46.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0