<Name of UID of Domain>

You can specify the Domain by its Name (as configured in SmartConsole) or UID.

To see the Domain UID, run:

mgmt_cli show domain name "<Name of Domain>"

<Full Path to Export File>

Specifies the path, at which the exported Domain data is saved.

Must be the directory path, or the full file path with the extension ".tgz".

If you do not specify the path explicitly, the default path is:

/var/log/<Name of Domain>_<Date>.tgz

1

Make sure it is possible to restore the Domain:

mgmt_cli import-management input-file-path <Full Path to Domain Backup File>.tgz verify-only true

2

Delete the current Domain.

You can perform this step in one of these ways:

• In SmartConsole connected to the MDS context
• With the API delete domain

  For API documentation, see the Check Point Management API Reference - search for delete domain.

3

Restore the Active Domain Management Server:

mgmt_cli import-management input-file-path <Full Path to Domain Backup File>.tgz verify-only false

4

Restore Standby Domain Management Servers.

For each Standby Domain Management Server, prepare and run this long command:

mgmt_cli set-domain name <Name or UID of Domain> servers.add.ip-address <IP Address of Domain Management Server> servers.add.name <Name of Domain Management Server> servers.add.multi-domain-server <Name of Multi-Domain Server> servers.add.backup-file-path <Full Path to Domain Backup File>.tgz --format json

Notes:

• When you restore the Standby Domain Management Servers, they must have the same IP addresses that were used when you collected the Domain backup.
• If there are wrong arguments, the entire command fails.

Example view from SmartConsole:

• green - Name of Multi-Domain Server
• yellow - Name of Domain
• red - Name of Domain Management Server
• light blue - IP Address of Domain Management Server

5

Restore Standby Domain Log Servers.

For each Domain Log Server, prepare and run this long command:

mgmt_cli set-domain name <Name or UID of Domain> servers.add.ip-address <IP Address of Domain Log Server> servers.add.name <Name of Domain Log Server> servers.add.multi-domain-server <Name of Multi-Domain Server> servers.add.backup-file-path <Full Path to Domain Backup File>.tgz --format json servers.add.type "log server"

Notes:

• When you restore the Standby Domain Log Servers, they must have the same IP addresses that were used when you collected the Domain backup.
• If there are wrong arguments, the entire command fails.

6

Configure and assign the Administrators and GUI clients:

1. Configure the Multi-Domain Server Administrators and GUI clients:
   1. Run the mdsconfig command
   2. Configure the Administrators
   3. Configure the GUI clients
   4. Exit the mdsconfig menu
2. Assign the Administrators to the Domains.

   See the R80.20 Multi-Domain Security Management Administration Guide - Chapter Managing Domains - Section Creating a New Domain and Section Assigning Trusted Clients to Domains.

7

Install policy on all managed Security Gateways and Clusters:

1. Connect with SmartConsole to the Active Domain.
2. Install the applicable policies on all managed Security Gateways and Clusters.