Has anyone run into this issue before?
I have a production Provider-1 NG with AI R55 running HFA_17
Solaris 9. I have about 20 CMAs on this Provider-1. I have
a single Manager + Container running on the same solaris 9 box.
Everything is running on the Production system.
I need to move one of the CMAs on the production over
to my lab environment. I performed the following on
the production system:
1) mdsenv
2) cd $MDSDIR
3) tar -cf /tmp/mds.global.tar conf
2) mdsenv checkpoint_CMA
2) cd $FWDIR
3) tar -cf /tmp/fwdir.conf.tar conf
4) tar -cf /tmp/fwdir.database.tar database
5) cd $CPDIR
6) tar -cf /tmp/cpdir.conf.tar conf
7) tar -cf /tmp/cpdir.database.tar database
I then move these files over to an FTP server
in my lab environment.
1) install a fresh install of P-1 NG with AI R55 on SPLAT,
2) run sysconfig and so on, this is the M+C box,
3) reboot the box when finish,
3) apply P-1 HFA_20 to the P-1 box,
4) reboot the box,
5) apply 30 eval license the P-1 box,
6) run mdsstop,
7) move the files from ftp server into /var/tmp,
8) cd /var/tmp
9) tar -xvf mds.global.tar
10) migrate_global_policies /var/tmp/conf
11) migration successful, remove /var/tmp/conf directory,
12) run mdsstart,
13) cd /var/tmp
14) tar -xvf cpdir.conf.tar
15) mv conf conf.cpdir
16) tar -xvf cpdir.database.tar
17) mv database database.cpdir
18) tar -xvf fwdir.conf.tar
19) tar -xvf fwdir.database.tar
20) rm -f *.tar
21) create a new CMA in the MDG and apply the CMA eval
license but do NOT start the CMA,
22) right-click on the CMA and select import. The
specified path is /var/tmp/
23) Import is successful. start the CMA,
24) successfully open the CMA and push policy to
enforcement modules,
on the LAB system with Provider-1 NGx R61 with HFA_02:
1) install a fresh install of P-1 NGx R61 on SPLAT,
2) run sysconfig and so on, this is the M+C box,
3) reboot the box when finish,
3) apply P-1 HFA_02 to the P-1 box,
4) reboot the box,
5) apply 30 eval license the P-1 box,
6) run mdsstop,
7) move the files from ftp server into /var/tmp,
8) cd /var/tmp
9) tar -xvf mds.global.tar
10) migrate_global_policies /var/tmp/conf
11) migration successful, remove /var/tmp/conf directory,
12) run mdsstart,
13) cd /var/tmp
14) tar -xvf cpdir.conf.tar
15) mv conf conf.cpdir
16) tar -xvf cpdir.database.tar
17) mv database database.cpdir
18) tar -xvf fwdir.conf.tar
19) tar -xvf fwdir.database.tar
20) rm -f *.tar
21) create a new CMA in the MDG and apply the CMA eval
license but do NOT start the CMA,
22) right-click on the CMA and select import. The
specified path is /var/tmp/
23) Import is successful. start the CMA,
24) can NOT open the CMA due to database corruption and
stuffs regarding SmartDefense. Reboot the box
repeately but could not fix it.
on the LAB system with Provider-1 NGx R65:
1) install a fresh install of P-1 NGx R65 on SPLAT,
2) run sysconfig and so on, this is the M+C box,
3) reboot the box when finish,
5) apply 30 eval license the P-1 box,
6) run mdsstop,
7) move the files from ftp server into /var/tmp,
8) cd /var/tmp
9) tar -xvf mds.global.tar
10) migrate_global_policies /var/tmp/conf
11) migration successful, remove /var/tmp/conf directory,
12) run mdsstart,
13) cd /var/tmp
14) tar -xvf cpdir.conf.tar
15) mv conf conf.cpdir
16) tar -xvf cpdir.database.tar
17) mv database database.cpdir
18) tar -xvf fwdir.conf.tar
19) tar -xvf fwdir.database.tar
20) rm -f *.tar
21) create a new CMA in the MDG and apply the CMA eval
license but do NOT start the CMA,
22) right-click on the CMA and select import. The
specified path is /var/tmp/
23) Import is successful. start the CMA,
24) Can open the CMA and push policy to Enforcement modules
The question is that why I am getting issues for
migration with P-1 NGx R61 with HFA_02? No issues for
migrating to NG with AI R55 HFA_20 or NGx R65. Is this
another bug in P-1 NGx R61?
Anyone run into this issues before? Thanks.
---------------------------------
Tonight's top picks. What will you watch tonight? Preview the hottest shows on
Yahoo! TV.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
