mds_backup

Description

The mds_backup command backs up binaries and data from a Multi-Domain Server Dedicated Check Point server that runs Check Point software to host virtual Security Management Servers called Domain Management Servers. Synonym: Multi-Domain Security Management Server. Acronym: MDS. to a user specified working directory.

You then copy the backup (1) In VRRP Cluster on Gaia OS - State of a Cluster Member that is ready to be promoted to Master state (if Master member fails). (2) In VSX Cluster configured in Virtual System Load Sharing mode with three or more Cluster Members - State of a Virtual System on a third (and so on) VSX Cluster Member. (3) A Cluster Member or Virtual System in this state does not process any traffic passing through cluster. files from the working directory to external storage.

This command requires Multi-Domain Superuser privileges.

The mds_backup command runs the gtar and dump commands to back up all databases. The collected information is stored in one *.tar file. The file name is a combination of the backup date and time and is saved in the current working directory. For example: 13Sep2015-141437.mdsbk.tar

Backing up and restoring in Management High Availability environment:

To back up and restore a consistent environment, make sure to collect and restore the backups and snapshots from all servers in the High Availability A redundant cluster mode, where only one Cluster Member (Active member) processes all the traffic, while other Cluster Members (Standby members) are ready to be promoted to Active state if the current Active member fails. In the High Availability mode, the Cluster Virtual IP address (that represents the cluster on that network) is associated: (1) With physical MAC Address of Active member (2) With virtual MAC Address. Synonym: Active/Standby. Acronym: HA. environment at the same time.
Make sure other administrators do not make changes in SmartConsole Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on. until the backup operation is completed.

For more information:

About Gaia Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems. Backup and Gaia Snapshot, see the R81.20 Gaia Administration Guide.
About Virtual Machine Snapshots, see the vendor documentation.

Notes:

Do not create or delete Domains or Domain Management Servers Virtual Security Management Server that manages Security Gateways for one Domain, as part of a Multi-Domain Security Management environment. Acronym: DMS. until the backup operation completes.
It is important to run the mds_backup command from directories that are not backed up.

For example, when you back up a Multi-Domain Server, do not run the mds_backup command from the /opt/CPmds-<Current_Release>/ directory, because it is a circular reference (backup of directory, in which it is necessary to write files).

Run the mds_backup command from a location outside the product directory tree to be backed up (for example: /home/admin, /var/log/). This becomes the working directory.

The mds_backup command does not collect the active State of a Cluster Member that is fully operational: (1) In ClusterXL, this applies to the state of the Security Gateway component (2) In 3rd-party / OPSEC cluster, this applies to the state of the cluster State Synchronization mechanism. Security log file (*.log) and Audit log file (*.adtlog).

This is necessary to prevent inconsistencies during the read-write operations.

Best Practice - Perform a log switch before you start the backup procedure.

You can back up the Multi-Domain Server configuration without the log files.

This backup is typically significantly smaller than a full backup with logs.

To back up without log files, add this line to the file $MDSDIR/conf/mds_exclude.dat configuration file:

log/*

After the backup completes, copy the backup *.tar file, together with the mds_restore, and gtar binary files, to your external backup location.

Syntax

mds_backup -h

mds_backup [-b] [-d <Target Directory>] [-ds] [-l] [-mask] [-s] [-v] [-x]

Parameters

Parameter	Description
`-h`	Shows help text.
`-b`	Batch mode - executes without asking anything.
`-d <Target Directory>`	Specifies the output directory. If not specified explicitly, the backup file is saved to the current directory. You cannot save the backup file to the root directory.
`-ds`	Disconnects all current sessions and discards their unpublished changes before the backup starts.
`-l`	Excludes logs from the backup.
`-mask`	Hide sensitive information in the Postgres database in the backup.
`-s`	Stops Multi-Domain processes before the backup starts.
`-v`	"Dry run" - Shows all files to be backed up, but does not perform the backup operation.
`-x`	Excludes binary files from the backup. The binary files are listed in the `$MDSDIR/conf/mds_binaries_exclude.dat` file.