First, reboot is never helpful in such CMA problems. If you doubt any zombies, it is better kill them. From the symptoms, it appears you were getting database corruption messages/smartdefense messages upon SmartDashboard login? What were the messages if any? It could be some smartdefense bug but more information on what you were actually seeing would help determine the cause and any possible fix if it is not a bug!
hth, Rajeev On 9/25/07, cisco4ng <[EMAIL PROTECTED]> wrote: > > Has anyone run into this issue before? > > I have a production Provider-1 NG with AI R55 running HFA_17 > Solaris 9. I have about 20 CMAs on this Provider-1. I have > a single Manager + Container running on the same solaris 9 box. > Everything is running on the Production system. > I need to move one of the CMAs on the production over > to my lab environment. I performed the following on > the production system: > > 1) mdsenv > 2) cd $MDSDIR > 3) tar -cf /tmp/mds.global.tar conf > 2) mdsenv checkpoint_CMA > 2) cd $FWDIR > 3) tar -cf /tmp/fwdir.conf.tar conf > 4) tar -cf /tmp/fwdir.database.tar database > 5) cd $CPDIR > 6) tar -cf /tmp/cpdir.conf.tar conf > 7) tar -cf /tmp/cpdir.database.tar database > I then move these files over to an FTP server > in my lab environment. > 1) install a fresh install of P-1 NG with AI R55 on SPLAT, > 2) run sysconfig and so on, this is the M+C box, > 3) reboot the box when finish, > 3) apply P-1 HFA_20 to the P-1 box, > 4) reboot the box, > 5) apply 30 eval license the P-1 box, > 6) run mdsstop, > 7) move the files from ftp server into /var/tmp, > 8) cd /var/tmp > 9) tar -xvf mds.global.tar > 10) migrate_global_policies /var/tmp/conf > 11) migration successful, remove /var/tmp/conf directory, > 12) run mdsstart, > 13) cd /var/tmp > 14) tar -xvf cpdir.conf.tar > 15) mv conf conf.cpdir > 16) tar -xvf cpdir.database.tar > 17) mv database database.cpdir > 18) tar -xvf fwdir.conf.tar > 19) tar -xvf fwdir.database.tar > 20) rm -f *.tar > 21) create a new CMA in the MDG and apply the CMA eval > license but do NOT start the CMA, > 22) right-click on the CMA and select import. The > specified path is /var/tmp/ > 23) Import is successful. start the CMA, > 24) successfully open the CMA and push policy to > enforcement modules, > > on the LAB system with Provider-1 NGx R61 with HFA_02: > 1) install a fresh install of P-1 NGx R61 on SPLAT, > 2) run sysconfig and so on, this is the M+C box, > 3) reboot the box when finish, > 3) apply P-1 HFA_02 to the P-1 box, > 4) reboot the box, > 5) apply 30 eval license the P-1 box, > 6) run mdsstop, > 7) move the files from ftp server into /var/tmp, > 8) cd /var/tmp > 9) tar -xvf mds.global.tar > 10) migrate_global_policies /var/tmp/conf > 11) migration successful, remove /var/tmp/conf directory, > 12) run mdsstart, > 13) cd /var/tmp > 14) tar -xvf cpdir.conf.tar > 15) mv conf conf.cpdir > 16) tar -xvf cpdir.database.tar > 17) mv database database.cpdir > 18) tar -xvf fwdir.conf.tar > 19) tar -xvf fwdir.database.tar > 20) rm -f *.tar > 21) create a new CMA in the MDG and apply the CMA eval > license but do NOT start the CMA, > 22) right-click on the CMA and select import. The > specified path is /var/tmp/ > 23) Import is successful. start the CMA, > 24) can NOT open the CMA due to database corruption and > stuffs regarding SmartDefense. Reboot the box > repeately but could not fix it. > > on the LAB system with Provider-1 NGx R65: > 1) install a fresh install of P-1 NGx R65 on SPLAT, > 2) run sysconfig and so on, this is the M+C box, > 3) reboot the box when finish, > 5) apply 30 eval license the P-1 box, > 6) run mdsstop, > 7) move the files from ftp server into /var/tmp, > 8) cd /var/tmp > 9) tar -xvf mds.global.tar > 10) migrate_global_policies /var/tmp/conf > 11) migration successful, remove /var/tmp/conf directory, > 12) run mdsstart, > 13) cd /var/tmp > 14) tar -xvf cpdir.conf.tar > 15) mv conf conf.cpdir > 16) tar -xvf cpdir.database.tar > 17) mv database database.cpdir > 18) tar -xvf fwdir.conf.tar > 19) tar -xvf fwdir.database.tar > 20) rm -f *.tar > 21) create a new CMA in the MDG and apply the CMA eval > license but do NOT start the CMA, > 22) right-click on the CMA and select import. The > specified path is /var/tmp/ > 23) Import is successful. start the CMA, > 24) Can open the CMA and push policy to Enforcement modules > > The question is that why I am getting issues for > migration with P-1 NGx R61 with HFA_02? No issues for > migrating to NG with AI R55 HFA_20 or NGx R65. Is this > another bug in P-1 NGx R61? > Anyone run into this issues before? Thanks. > > > > --------------------------------- > Tonight's top picks. What will you watch tonight? Preview the hottest > shows on Yahoo! TV. > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
