How to migrate Full HA environment to Distributed

Solution ID:
ClusterXL, UTM-1, Power-1
NGX R65 w/ Messaging Security, R70, R71, R75
SecurePlatform, SecurePlatform 2.6
Platform / Model:
UTM-1, Power-1
Date Created:
Last Modified:


The below procedure should be performed on the Primary member of Full HA cluster.

  1. To minimize downtime, perform a manual fail-over from Primary cluster member to Secondary cluster member.
    To do so, run the ‘clusterXL_admin down‘ command on Primary cluster member (refer to sk55081 – Best practice for manual fail-over in ClusterXL) and let the Secondary cluster member to run as the Active member in the cluster to continue passing traffic.
  2. Remove the cluster peer member on the Primary cluster member. Run:
    # cp_conf fullha del_peer
  3. Restart Check Point services on the Primary cluster member. Run:
    # cpstop ; cpstart 
  4. After all Check Point services are running again, disable Full HA mechanism on the Primary cluster member. Run:
    # cp_conf fullha disable
  5. Reboot the Primary cluster member.
  6. After the Primary cluster member is up and running again, connect to it with the SmartDashboard.
    You should see that the Full HA cluster object was replaced by a normal Stand-Alone object.
  7. Open the object properties window and clear the ‘Firewall’ and the ‘VPN’ checkboxes.
  8. Save the changes and install database to the existing Smart Management server.
    Now the Primary cluster member machine is running only with a Smart Management server product.
  9. Export the current database using the upgrade_export command. This upgrade_export file should be imported later on into the new Smart Management server.
  10. Import the upgrade_export file to the new Smart Management server and confirm successful migration.
  11. Reinstall the Primary cluster member as a normal cluster member (running only Firewall and Cluster products).
  12. Re-initiate the SIC between the cluster members machines.
  13. Using the cluster Configuration Wizard in the SmartDashboard, recreate the cluster configuration.

Laisser un commentaire

Entrez vos coordonnées ci-dessous ou cliquez sur une icône pour vous connecter:


Vous commentez à l'aide de votre compte Déconnexion /  Changer )

Photo Google+

Vous commentez à l'aide de votre compte Google+. Déconnexion /  Changer )

Image Twitter

Vous commentez à l'aide de votre compte Twitter. Déconnexion /  Changer )

Photo Facebook

Vous commentez à l'aide de votre compte Facebook. Déconnexion /  Changer )


Connexion à %s