Hi, Yes on the upgrade_export and import for migration.
Not for ipso config, didn't think we needed to export the ipso config as we were moving to SPLAT and just built the config, interfaces, routes, from scratch to match what we needed. On Sat, Dec 10, 2011 at 8:48 AM, Reinhard Stich < [email protected]> wrote: > hi, > > are you using upgrade_export and _import for the migration? > if yes - are you using the r75.1 upgrade_export to export the ipso-config? > you should ... > > br > reinhard > > > At 00:10 10.12.2011, you wrote: > >> Hello, >> >> We are testing migrating from an IPSO cluster (VRRP) running R65 to a new >> SPLAT cluster on R75.1 >> >> Objects and Policy appear to migrate fine and the security policy rules >> and >> NAT appear to work fine but we are unable to re-establish the VPN tunnels. >> This happens when we leave it in the default Simplified mode, after the >> import the original policy is in traditional mode. The current policy >> uses >> Traditional Mode configurations so when it is imported and defaults to >> Simplified we change it back and then when we try to push policy >> it complains that one of the Checkpoint Objects (another cluster that is >> internal to the network and never has had VPN) doesn't have VPN turned on. >> Yet none of the encrypt rules are applied to that gateway. >> >> Has anyone had experience with a similar migration or any suggestions on >> cause of the problem? >> >> Regards >> >> -- >> "The wild requires that we learn the terrain, nod to all the plants and >> animals and birds, ford the streams and cross the ridges and tell a good >> story when we get back home." >> Gary Snyder >> >> ==============================**=================== >> To set vacation, Out-Of-Office, or away messages, >> send an email to >> [email protected].**checkpoint.com<[email protected]> >> in the BODY of the email add: >> set fw-1-mailinglist nomail >> ==============================**=================== >> To unsubscribe from this mailing list, >> please see the instructions at >> http://www.checkpoint.com/**services/mailing.html<http://www.checkpoint.com/services/mailing.html> >> ==============================**=================== >> If you have any questions on how to change your >> subscription options, email >> [email protected] >> ==============================**=================== >> > > -- > Reinhard Stich [email protected] > Arrow ECS Internet Security AG, 1100 Wien, Wienerbergstrasse 11 > Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333 > > Scanned by Check Point Total Security Gateway. > > ==============================**=================== > To set vacation, Out-Of-Office, or away messages, > send an email to > [email protected].**checkpoint.com<[email protected]> > in the BODY of the email add: > set fw-1-mailinglist nomail > ==============================**=================== > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/**services/mailing.html<http://www.checkpoint.com/services/mailing.html> > ==============================**=================== > If you have any questions on how to change your > subscription options, email > [email protected] > ==============================**=================== > > -- "The wild requires that we learn the terrain, nod to all the plants and animals and birds, ford the streams and cross the ridges and tell a good story when we get back home." Gary Snyder ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
