In a migration and upgrade scenario, you perform the procedure on the source Multi-Domain Log Server and the different target Multi-Domain Log Server.
Note - Upgrade of a Multi-Domain Log Server from R80.20.M1 is not supported. You must perform a clean install of R80.20 Multi-Domain Log Server.
Important - Before you upgrade a Multi-Domain Log Server:
Step |
Description |
---|---|
1 |
|
2 |
See the Upgrade Options and Prerequisites. |
3 |
You must upgrade your Multi-Domain Servers. |
4 |
You must close all GUI clients (SmartConsole applications) connected to the source Multi-Domain Log Server. |
Workflow:
Step 1 of 10: Get the R80.20 installation image
Step |
Description |
---|---|
1 |
Download the R80.20 Clean Install ISO file from the R80.20 Home Page SK. |
2 |
Transfer the R80.20 ISO file to the current Multi-Domain Server to some directory (for example, Note - Make sure to transfer the file in the binary mode. |
Step 2 of 10: On the current Multi-Domain Log Server, run the Pre-Upgrade Verifier and export the entire management database
Step |
Description |
---|---|
1 |
Connect to the command line on the current Multi-Domain Log Server. |
2 |
Log in with the superuser credentials. |
3 |
Log in to the Expert mode. |
4 |
Stop all Check Point services:
|
5 |
Go to the main MDS context:
|
6 |
Mount the R80.20 ISO file:
|
7 |
Go to the installation folder in the ISO:
|
8 |
Run the installation script:
This menu shows:
|
9 |
Enter 1 to run the Pre-upgrade verification. Note - The Pre-Upgrade Verifier analyzes compatibility of the currently installed configuration with the version, to which you upgrade. A detailed report shows the steps to do before and after the upgrade. |
10 |
Read the Pre-Upgrade Verifier output. If you need to fix errors:
|
11 |
Enter 3 to export the current Multi-Domain Log Server configuration. |
12 |
Answer the interactive questions:
Note - If you enter no in the question " |
13 |
Make sure the export file is created in the specified directory:
|
14 |
Calculate the MD5 for the exported file:
|
15 |
Transfer the exported database from the current Multi-Domain Log Server to an external storage:
Note - Make sure to transfer the file in the binary mode. |
Step 3 of 10: Install a new R80.20 Multi-Domain Log Server
Perform a clean install of the R80.20 Multi-Domain Log Server on another computer (do not perform initial configuration in SmartConsole).
Important:
The IP addresses of the source and target R80.20 Multi-Domain Log Servers must be the same. If you need to have a different IP address on the R80.20 Multi-Domain Log Server, you can change it only after the upgrade procedure. Note that you have to issue licenses for the new IP address. For applicable procedure, see sk74020.
Step 4 of 10: On the new R80.20 Multi-Domain Log Server, import the entire management database
Step |
Description |
---|---|
1 |
Connect to the command line on the R80.20 Multi-Domain Log Server. |
2 |
Log in with the superuser credentials. |
3 |
Log in to the Expert mode. |
4 |
Make sure a valid license is installed:
If it is not already installed, then install a valid license now. |
5 |
Transfer the exported database from an external storage to the R80.20 Multi-Domain Log Server, to some directory. Note - Make sure to transfer the file in the binary mode. |
6 |
Make sure the transferred file is not corrupted. Calculate the MD5 for the transferred file and compare it to the MD5 that you calculated on the original Multi-Domain Log Server:
|
7 |
Import the configuration:
Note: |
8 |
Make sure that on all Domain Log Servers, none of the required daemons (FWM, FWD, CPD, and CPCA) are in the state "
If some of the required daemons on a Domain Log Server are in the state "
|
Step 5 of 10: Install the management database
Step |
Description |
---|---|
1 |
Connect with SmartConsole to each R80.20 Domain Management Server that manages the Domain Log Server. |
2 |
In the top left corner, click Menu > Install database. |
3 |
Select all objects. |
4 |
Click Install. |
5 |
Click OK. |
Step 6 of 10: On the new R80.20 Multi-Domain Log Server, upgrade the attributes of all managed objects in all Domain Log Servers
Step |
Description |
---|---|
1 |
Connect to the command line on the R80.20 Multi-Domain Log Server. |
2 |
Log in with the superuser credentials. |
3 |
Log in to the Expert mode. |
4 |
Make sure that on all Domain Log Servers, none of the required daemons (FWM, FWD, CPD, and CPCA) are in the state "
If some of the required daemons on a Domain Log Server are in the state "
|
5 |
Go to the main MDS context:
|
6 |
Upgrade the attributes of all managed objects in all Domain Log Servers at once:
Notes:
|
7 |
Allow the database synchronization to run:
Restart the Check Point services:
For more information, see sk121718. |
8 |
Make sure that on all Domain Log Servers, none of the required daemons (FWM, FWD, CPD, and CPCA) are in the state "
If some of the required daemons on a Domain Log Server are in the state "
|
Step 7 of 10: Test the functionality on R80.20 Multi-Domain Log Server
Step |
Description |
---|---|
1 |
Connect with the SmartConsole to the R80.20 Multi-Domain Log Server. |
2 |
Make sure the configuration was upgraded correctly and it works as expected. |
Step 8 of 10: Test the functionality on R80.20 Multi-Domain Server
Step |
Description |
---|---|
1 |
Connect with the SmartConsole to the R80.20 Multi-Domain Server. |
2 |
Make sure the logging works as expected. |
Step 9 of 10: Disconnect the old Multi-Domain Log Server from the network
Step 10 of 10: Connect the new Multi-Domain Log Server to the network