Re: [FW-1] Disaster Recovery Testing and Licenses

[<Aaron Reynolds>]

Title: Disaster Recovery Testing and Licenses

Is this IPSO?  If so, you just need to save of the backup image, re-install to the same IPSO/Firewall-1 release, copy the image to the new system, and then restore.  Just did one the other day.  Took about 30 minutes.  Granted, this is in a distributed installation, where management station was on another box.  In that case, the firewall recovery is pretty easy.

 

-Aaron

-----Original Message-----
From: Don Guyer [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, October 08, 2002 3:51 PM
To: [EMAIL PROTECTED]
Subject: Re: [FW-1] Disaster Recovery Testing and Licenses

Hal,

 

    I appreciate that bit of advice, but we already do that. I'm talking about walking into our DR vendors' building, facing a bare server and doing everything from scratch. The only thing I bring with me is the O/S, CP software and a copy of our rulebase & objects etc on floppy.

 

Thanks again,

Don Guyer
Information Systems
Citadel Federal Credit Union
[EMAIL PROTECTED]
Ph: 800.666.0191 x7072
Fax: 610.380.6083

-----Original Message-----
From: Hal Dorsman [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, October 08, 2002 5:33 PM
To: [EMAIL PROTECTED]
Subject: Re: [FW-1] Disaster Recovery Testing and Licenses

Keep a cold standby with the same IPs as your primary.  You can do simulated

testing with a few hubs and laptops.  Do an after hours DR test by shutting down

your primary, swap over your ethernet cables, and reboot your secondary (interfaces

must be seen as active coming up or else the fw software will not bind to the interfaces).

When your secondary is up and running and you are satisfied with results, switch

them back.

 

Hal

 

Hal Dorsman
Network Administrator
Rocky Mountain Elk Foundation
Missoula, Montana USA
[EMAIL PROTECTED]
(406)523-4576

-----Original Message-----
From: Don Guyer [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, October 08, 2002 2:52 PM
To: [EMAIL PROTECTED]
Subject: [FW-1] Disaster Recovery Testing and Licenses

Hello everyone,

        If anyone out there performs any kind of DR testing, how do you go about handling the license? Obviously, it is tied to a specific IP address, and this poses an issue when assigned a different IP at the DR testing facility.

TIA!

Don Guyer
Information Systems
Citadel Federal Credit Union
[EMAIL PROTECTED]
Ph: 800.666.0191 x7072
Fax: 610.380.6083