CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


Tim Hall has done it again! He has just released the 2nd edition of "Max Power".
Rather than get into details here, I urge you to check out this announcement post.
It's a massive upgrade, and well worth checking out. -E

 

Results 1 to 5 of 5

Thread: Migrate R77.30 Open Server to new appliance 5100

  1. #1
    Join Date
    2016-10-06
    Posts
    17
    Rep Power
    0

    Default Migrate R77.30 Open Server to new appliance 5100

    Hi to all,
    I've two open server cluster nodes with R77.30 and one management with Gaia and i would like to migrate the enviroment on two 5100 appliance R80.10.
    What is best possible scenario for the migrations?
    Thanks for your help.

  2. #2
    Join Date
    2007-06-04
    Posts
    3,278
    Rep Power
    16

    Default Re: Migrate R77.30 Open Server to new appliance 5100

    Are you looking to go from two clusters to two single boxes or two clusters based on 5100 Appliances?

  3. #3
    Join Date
    2016-10-06
    Posts
    17
    Rep Power
    0

    Default Re: Migrate R77.30 Open Server to new appliance 5100

    From two cluster nodes in load balancing to two cluster nodes in HA on applicances.

  4. #4
    Join Date
    2007-06-04
    Posts
    3,278
    Rep Power
    16

    Default Re: Migrate R77.30 Open Server to new appliance 5100

    Ok then first thing that would do is migrate the Management to R80.10, Use the Migration Tools to clean build an R80.10 then import the exported R80.10 config from the R77.30.

    Make sure get the latest R80.10 migration tools off the Check Point Website.

    Confirm everything working with the R80.10 management server with the R77.30 clusters.

    Then build the first pair of 5100 Appliances.

    Take one and replace one of the Open Server boxes with the 5100.

    Change the Cluster Object to be R80.10 and the Hardware to be 5100.

    Establish SIC to the 5100 and install License to the Box.

    Install Policy unchecking the piece where it says about installing to both Cluster Members or don't install so get the policy onto the first 5100.

    May throw up some warnings which can deal with from the change to R80.10 from R77.30 for the Installation version but will depend upon what using in terms of blades etc.

    This should go into a Down State.

    Then shutdown the Second Open Server and remove from the Network. The 5100 should then go Active Attention and start to process traffic

    Insert the Second 5100 into the Network, establish SIC, License etc and then install policy again to the Cluster

    Cluster should then be up and running


    Repeat for Second Cluster.

    Your Management Server will have the policies etc.
    Any VPN configuration etc should migrate over.

    Any files such as the $FWDIR/boot/modules/fwkern.conf, $FWDIR/conf/trac_client_1.ttm etc should be copied off the Open Server and installed onto the appropriate 5100 etc,

  5. #5
    Join Date
    2016-10-06
    Posts
    17
    Rep Power
    0

    Default Re: Migrate R77.30 Open Server to new appliance 5100

    Migration completed, thanks a lot for your help.

Similar Threads

  1. Management Server Redudancy between Appliance and Virtual/Open Server
    By jo84068406 in forum Management High Availability
    Replies: 9
    Last Post: 2016-08-12, 00:12
  2. Is an appliance more secure than an open server?
    By Spacetrucker in forum Installing And Upgrading
    Replies: 13
    Last Post: 2015-08-24, 09:23
  3. Appliance vs open server?
    By Spacetrucker in forum Installing And Upgrading
    Replies: 31
    Last Post: 2015-01-03, 22:13
  4. UTM-1 450 migrate to 2012 4600 appliance
    By cidic007@gmail.com in forum Check Point 2012 Appliances
    Replies: 2
    Last Post: 2012-09-26, 18:28
  5. How to migrate SmartCenter R60 (IPSO) box to R71 Smart-1 appliance (SPLAT)
    By odyssey7027 in forum Installing And Upgrading
    Replies: 3
    Last Post: 2011-04-07, 09:49

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •