Thanks Rajeev. I've managed to merge objects and policies. To merge objects,
I've copied /etc/fw/conf/objects_5_0.C to a new machine (server A). Then I used cp_merge to merge server A and server B objects. cp_merge merge_objects -d /tmp It worked fine. Similarly I copied the policy file policy.W from Server A to Server B and used cp_merge import_policy -f /tmp/policy.W I got the error message "/tmp/policy.W, line 52: ERROR: Cannot use <::Log>: Not in scope ERROR: Failed to import policy from file '/tmp/policy.W'. Later I ran upgrade_export tool on server A. It created a cp_db_configuration.tgz file. I copied the cp_db_configuration.tgz file to Server B and then ran upgrade_import tool to copy the policy across from server A to server B. Once again thank you very much. Regards, Rajesh. fw confmerge is a 4.1 util and will not work for NG. You can either use upgrade export which exports database and create a tgz file that you can then use to import with upgrade_import tool to merge with new mgmt server- the name looks a little misnomer but it is because when you merge objects and policies, the upgrade tools need to upgrade any data structures to match with the newer version to which you are importing. If you prefer to selectively merge objects and policies, you can use cp_merge utility. Rajeev -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Rajesh Sent: Monday, January 24, 2005 1:41 AM To: [email protected] Subject: Re: [FW-1] merging NG AI objects How can you merge two different servers objects and policies using Export/import tools. Thanks, Rajesh. -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Chris McGill Sent: Monday, January 24, 2005 4:42 PM To: [email protected] Subject: Re: [FW-1] merging NG AI objects Use Export/Import Tools included with CP Christopher McGill CCNA, MCP ============================== ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
