配置手册1系统恢复与升级

系统备份，恢复与升级Lab模拟场景UTM-1UTM-1分布式部署独立部署R71.10R71.10R71.10实现目标备份当前整个系统从当前系统R71.30升级到R75.20恢复到升级前的状态备份管理服务器SmartCenterLastlogin:ThuApr2110:10:252011from5?forlistofcommandssysconfigforsystemandproductsconfiguration[smc2]#[smc2]#expert#进入expert模式Enterexpertpassword:Youareinexpertmodenow.[Expert@smc2]#cd$FWDIR[Expert@smc2]#cdbin[Expert@smc2]#cdupgrade_tools/[Expert@smc2]#pwd/opt/CPsuite-R71/fw1/bin/upgrade_tools[Expert@smc2]#ls-ltotal52036-rw-rw----1rootroot33611807Apr1912:0620110419.tgz-rwxrwx---1rootbin6516752Dec1613:33migrate-rwxrwx---1rootbin26523Dec1613:31migrate.conf-rwxrwx---1rootbin6516752Dec1613:33upgrade_export#备份工具-rwxrwx---1rootbin6516752Dec1613:33upgrade_import#恢复工具[Expert@smc2]#./upgrade_exportSMC_20110421.tgz#执行备份工具，指定备份文件名Youarerequiredtocloseallclientstoorexecute'cpstop'beforetheExportoperationbegins.Press'Enter'tocontinue.#按回车继续Copyingrequiredfiles...Compressingfiles...Theoperationcompletedsuccessfully.Locationofarchivewithexporteddatabase:/opt/CPsuite-R71/fw1/bin/upgrade_tools/SMC_20110421.tgz#备份成功，并生成文件根据红色命令进行备份步骤备份安全网关Lastlogin:SunSep1121:44:302011from8?forlistofcommandssysconfigforsystemandproductsconfiguration[cpmodule]#[cpmodule]#expert#进入expert模式Enterexpertpassword:Youareinexpertmodenow.[Expert@cpmodule]#cd/etc[Expert@cpmodule]#pwd/etc[Expert@cpmodule]#tarcfzsysconfig.tgz./sysconfig[Expert@cpmodule]#ls-lsysconfig.tgz-rw-rw----1rootroot14775Sep1121:45sysconfig.tgz#备份成功，并生成文件[Expert@cpmodule]#根据红色命令进行备份步骤使用winscp进行传输Lastlogin:SunSep1121:53:072011from8?forlistofcommandssysconfigforsystemandproductsconfiguration[cpmodule]#[cpmodule]#expert#进入专家模式Enterexpertpassword:Youareinexpertmodenow.[Expert@cpmodule]#adduserbkuser#增加一个备份用户Enterpassword:Enterpassword(again):User'bkuser'wasaddedsuccessfully[Expert@cpmodule]#chsh-s/bin/bashbkuser#更改用户登录环境Changingshellforbkuser.Shellchanged.[Expert@cpmodule]#使用bkuser登录进行文件拷贝添加备份用户升级方案一:直接升级直接升级Smartcenter上传升级包完成登录选择菜单Device>Upgrade选择升级文件点击按钮Uploadpackagetodevice直接升级Smartcenter勾上saveasnapshot，升级前会做一次snapshot，如果升级失败系统会自动恢复这个snapshot点击StartUpgrade开始升级升级过程直接升级Smartcenter最后机器自动重启升级完毕直接升级安全网关参考直接升级安全管理服务器smartcenter

通过smartupdate进行升级由于实验条件所限，暂不讨论使用Smartupdate升级直接升级安全网关升级网关完成后，登录smartupdate，邮件点击刚升级好的网关对象，然后点右键，选择Getgatewaydata，安全管理服务器会读取安全网关的更新信息升级方案二:迁移升级迁移升级SmartCenter到usercenter下载R75.20版本迁移工具R71.30SmartCenterR75.20SmartCenter迁移升级把迁移工具放置在R71.30SmartCenter上。参考本ppt备份章节winscp部分迁移升级SmartCenterLastlogin:MonSep1200:56:222011?forlistofcommandssysconfigforsystemandproductsconfiguration[cpmodule]#expertEnterexpertpassword:Youareinexpertmodenow.[Expert@cpmodule]#cd~bkuser[Expert@cpmodule]#pwd/home/bkuser[Expert@cpmodule]#lsCheck_Point_migration_tools_R75.20.linux30.tgz[Expert@cpmodule]#tarxfzCheck_Point_migration_tools_R75.20.linux30.tgz[Expert@cpmodule]#lsCheck_Point_migration_tools_R75.20.linux30.tgzpre_upgrade_verifiermigrateupgrade_exportmigrate.confupgrade_import[Expert@cpmodule]#./upgrade_exportbak20110912.tgzYouarerequiredtocloseallclientstoSecurityManagementServerorexecute'cpstop'beforetheExportoperationbegins.Doyouwanttocontinue?(y/n)[n]?yCopyingrequiredfiles...Compressingfiles...Theoperationcompletedsuccessfully.Locationofarchivewithexporteddatabase:/home/bkuser/bak20110912.tgz[Expert@cpmodule]#使用R75.20迁移工具从R71.30SmartCenter中导出配置注意：导出工具不支持R71.30以下版本。一定要查阅ReleaseNotes手册了解详情。迁移升级SmartCenterLastlogin:FriSep923:03:312011from?forlistofcommandssysconfigforsystemandproductsconfiguration[cpmodule]#expertEnterexpertpassword:Youareinexpertmodenow.[Expert@cpmodule]#pwd/home/admin[Expert@cpmodule]#cd~bkuser[Expert@cpmodule]#lsbak20110912.tgz[Expert@cpmodule]#mvbak20110912.tgz$FWDIR/bin/upgrade_tools/[Expert@cpmodule]#cd$FWDIR/bin/upgrade_tools/[Expert@cpmodule]#lsbak20110912.tgzmigratemigrate.confupgrade_exportupgrade_import[Expert@cpmodule]#./upgrade_importbak20110912.tgzTheimportoperationwillstopallCheckPointservices(cpstop).Doyouwanttocontinue?(y/n)[n]?yTheimportoperationcompletedsuccessfully.DoyouwishtostartCheckPointservices?(y/n)[y]?y[Expert@cpmodule]#reboot把配置包导入新安装的R75.20系统中，并运行命令导入配置

注，必须先初始化新的R75.20在进行导入

恢复恢复管理服务器SmartCenterLastlogin:ThuApr2114:49:092011from33?forlistofcommandssysconfigforsystemandproductsconfiguration[smc2]#expertEnterexpertpassword:Youareinexpertmodenow.[Expert@smc2]#cd$FWDIR[Expert@smc2]#cdbin[Expert@smc2]#cdupgrade_tools/[Expert@smc2]#pwd/opt/CPsuite-R71/fw1/bin/upgrade_tools[Expert@smc2]#./upgrade_importSMC_20110421.tgz#恢复备份Extractingthedatabase...TheimportoperationwillstopallCheckPointservices(cpstop).Doyouwanttocontinue?(y/n)[n]?y....Importingfiles...Theimportoperationcompletedsuccessfully.DoyouwishtostartCheckPointservi