One of the most demanded features for years was an ability to migrate Provider-1 systems not only between different pieces of hardware but also between OS platforms.
It became quite hot when decent SPLAT was out. Once upon a time it was only possible with CMA migration. It was a painful and long procedure. And you could not do this if you had VSX managed.
This is not the case anymore. With new Multi-domain systems of R7x you can do it fast and easy.
First, insert Provider-1 target version installation CD to your MDS. Mount cdrom and go to linux folder on it. Run the usual mds_setup script from there.
You will have 4 options, and the last one is to export your existing MDS configuration. Choose it and continue. As a result you will get MDS export file.
On the target machine install the desired version from the CD. Pre-configure it as required (Primary MDS, etc).
Copy the export file to it.
To import go to $MDSDIR/system/install and run mds_import script from there pointing to your export file.
Say, your export file is placed in /var/tmp and called export_mds_12345.tgz..Then your import command will look ./mds_import /var/tmp/export_mds_12345.tgz.
The script will re-build your MDS on the new machine and will upgrade database, if necessary.
In about ten to twenty minutes you will have new migrated and upgraded system. No more mds_backup and mds_restore hassle, no more upgrade in place and disk space wasted by old versions. You can easily use it with VSX, you can finally change your old Solaris MDS to a shiny new SPLAT box without spending 10 days migrating CMAs with stopped production management operations.
Labels
- Cheat Sheets (7)
- Checkpoint (159)
- Cisco (24)
- Commands (5)
- Fortigate (2)
- Frame-Relay (9)
- Linux (3)
- Netscaler (29)
- Netscreen (2)
- Nokia (7)
- UNIX (2)
Live Traffic
Advanced migration of Provider-1 R7x
6/08/2011 07:16:00 PM
Posted by MK | Filed Under Checkpoint | 0 Comments
Comments
Search This Blog
Blog Archive
-
▼
2011
(107)
-
▼
June
(49)
- Configuring controller E1
- Autonegotiation Valid Configuration
- Hardware Troubleshooting for Cisco 12000 Series In...
- troubleshooting high CPU utilization
- NetScaler Password Recovery Procedure
- Configuring DNS
- Configuring Link Aggregate Channels
- To configure a VLAN by using the NetScaler command...
- Configuring Network Interfaces
- Enabling and Disabling MAC-Based Forwarding Mode
- Enabling and Disabling Layer 2 or 3 Mode
- Binding the SSL Policy to an SSL Vserver
- Creating SSL Policies
- Creating an SSL Action to Enable OWA Support
- Binding an SSL Certificate Key Pair to the Vserver
- Adding a Certificate Key Pair
- Binding Services to the SSL Vserver
- Adding an SSL-Based Vserver
- Securing Load Balanced Traffic by Using SSL
- Binding a Compression Policy to a Vserver
- Configuring Services to Compress Data
- Enabling Compression
- Configuring Backup Vservers
- Configuring URL Redirection
- How To Perform a SecurePlatform Firewall Health Ch...
- VPN between Check Point Security Gateway and Cisco...
- SmartView Tracker allows a maximum of 0 windows
- What is ike.elg?
- How can I troubleshoot Cisco to Check Point VPN
- How to increase sizes of buffer / ring descriptor ...
- The CPinfo utility
- What information is required to troubleshoot the V...
- Enabling IKE and VPN debugging
- How do I run full blown VPN debug on gateway for t...
- How to generate a valid ike debug, vpn debug and f...
- The reason why we need LDAP profiles
- How To Perform a SecurePlatform Firewall Health Ch...
- Checkpoint - Log File Corrupted
- The netstat Command
- VI - Cheat Sheet
- Checkpoint - Critical error messages and logs
- TCP DUMP
- Checkpoint : Unwanted Services : Save Memory
- Checkpoint Commands - In depth - tHEY dONT liKE BU...
- Path of Database Revision Controls
- NTP in Splat
- Upgrade and Roadmap Diagrams Now Include R75.10
- CPX 2011: Security Gateways in the data center
- Advanced migration of Provider-1 R7x
-
▼
June
(49)
Post a Comment