On Thu, 2004-04-22 at 23:15, Brad Pinkston wrote:
> I may be biting off more than I can chew, but I'm trying to migrate from a Windows
> 2000 server running Primary Management NGAI-R54 to SPLAT NGAI-R54 on a different
> machine with a different IP and hostname. Is this even possible? The Checkpoint
> doc on "How to Upgrade a Management Server" doesn't say anything about the
> import/export utilities or anything.
Old Server :
1. Create in your database a Gateway object (probably "host") to
represent the new SmartCenter. Check Secondary Management Server.
2. Run upgrade_export.
New Server :
3. Install SPLAT on the new server.
4. Make network configuration and install Check Point products (same
products than the one installed on the old server).
5. cpstop
6. Edit ${FWDIR}/conf/objects_5_0.C
6.1 Find your old server definition :
6.1.1 Suppress the content of the "certificates:" section :
Before :
:certificates: (
XXXXX
)
After :
:certificates: ()
6.1.2 Change the primary_management statement :
Before :
:primary_management (true)
After :
:primary_management (false)
6.1 Find your new server definition :
6.1.1 Suppress the content of the "certificates:" section :
Before :
:certificates: (
XXXXX
)
After :
:certificates: ()
6.1.2 Change the primary_management statement :
Before :
:primary_management (false)
After :
:primary_management (true)
6.3 If you have other firewall module managed by the old server,
locate them and supress the content of the "certificates" section.
7. Reset SIC :
# fwm sic_reset
8. Initialize SIC :
# cpconfig
Choice 7.
Regards.
>
> The reason I'm trying to do this is to separate the firewall from a AD Domain
> Controller and avoid Windows OS patches. It seems as though a different OS is easy,
> or a different IP/hostname is easy, but the combo is proving quite difficult. If
> anyone has any suggestions I would greatly appreciate it.
>
> Brad Pinkston
> Firewall/Network Administrator
> Checkpoint CCSA
> Centenary College of LA
> (318) 869-5721
> [EMAIL PROTECTED]
>
> --------------------------------------------------------------------
> This email has been scanned for viruses by Centenary College of LA
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to [EMAIL PROTECTED]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [EMAIL PROTECTED]
> =================================================
--
[EMAIL PROTECTED] CYBER NETWORKS
http://www.freebsd.org http://www.cyber-networks.fr
PGP Key fingerprint = 9AEA 910F CB46 C39B 89EE EF4C 68AC 2AF1 CF17 3713
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
