Check Point Smart-1（SmartCenter) 备份恢复方法

CheckPoint使用upgrade_export 和upgrade_import两个工具进行SmartCenter 的备份和

恢复，两个工具位于SmartCenter的$FWDIR/bin/upgrade_tools/目录下。备份文件可以通过

ftp 或其他方式上传到ftp 服务器或网络共享空间，以便保管。 格式：

[Expert@Smart-1]#./upgrade_export  文件名.tgz#备份工具，备份文件存放在当前目录下

[Expert@Smart-1]#./upgrade_import  文件名.tgz#恢复工具

首先通过 ssh登录 Smart-1命令行，进入 expert 模式，备份和恢复过程如下：

 

 

备份SmartCenter

 

[smc2]#

[smc2]#expert#进入 expert 模式

Enter expertpassword:

Youareinexpert modenow. [Expert@smc2]#cd$FWDIR [Expert@smc2]#cdbin [Expert@smc2]#cdupgrade_tools/ [Expert@smc2]#pwd

/opt/CPsuite-R75/fw1/bin/upgrade_tools

[Expert@smc2]#ls-l total52036

-rw-rw----1rootroot33611807Apr1912:06 20110419.tgz

-rwxrwx---1rootbin6516752Dec1613:33migrate

-rwxrwx---1rootbin26523Dec1613:31 migrate.conf

-rwxrwx---1rootbin6516752Dec1613:33upgrade_export#备份工具

-rwxrwx---1rootbin6516752Dec1613:33upgrade_import#恢复工具

[Expert@smc2]#./upgrade_exportSMC_20110421.tgz#执行备份工具，指定备份文件名

Youarerequiredto closeallclientsto SecurityCenter

or execute'cpstop'beforetheExportoperationbegins. Press'Enter'to continue.#按回车继续

2011CheckPointSoftwareTechnologiesLtd.Allrightsreserved

.

Copyingrequiredfiles... Compressingfiles...

Theoperationcompletedsuccessfully.

Location                     of                      archive                     with                      exported                     database:

/opt/CPsuite-R75/fw1/bin/upgrade_tools/SMC_20110421.tgz #备份成功，并生成文件

[Expert@smc2]#ls-l total86412

-rw-rw----1rootroot33611807Apr1912:06 20110419.tgz

-rw-rw----1rootroot35158261Apr2114:33 SMC_20110421.tgz#备份文件

-rwxrwx---1rootbin6516752Dec1613:33migrate

-rwxrwx---1rootbin26523Dec1613:31 migrate.conf

-rwxrwx---1rootbin6516752Dec1613:33upgrade_export

-rwxrwx---1rootbin6516752Dec1613:33upgrade_import

 

 

恢复SmartCenter

 

 

[smc2]#expert

Enter expertpassword:

Youareinexpert modenow. [Expert@smc2]#cd$FWDIR [Expert@smc2]#cdbin [Expert@smc2]#cdupgrade_tools/ [Expert@smc2]#pwd

/opt/CPsuite-R75/fw1/bin/upgrade_tools

[Expert@smc2]#ls-l total86412

-rw-rw----1rootroot33611807Apr1912:06 20110419.tgz

-rw-rw----1rootroot35158261Apr2114:33 SMC_20110421.tgz

-rwxrwx---1rootbin6516752Dec1613:33migrate

-rwxrwx---1rootbin26523Dec1613:31 migrate.conf

-rwxrwx---1rootbin6516752Dec1613:33upgrade_export

2011CheckPointSoftwareTechnologiesLtd.Allrightsreserved

-rwxrwx---1rootbin6516752Dec1613:33upgrade_import

[Expert@smc2]#./upgrade_importSMC_20110421.tgz#恢复备份

Extractingthedatabase...

TheimportoperationwillstopallCheckPointservices(cpstop). Doyouwantto continue?(y/n) [n]?y

evstop: Stoppingproduct-SmartEventCorrelationUnit#停止 CheckPoint服务

CheckPointSmartEventCorrelationUnitstopped

StoppingSmartReporter...

StoppingtheSmartReporterServer.

StoppingtheSmartReporterLogConsolidator. StoppingSmartReporterDatabase.

Note:Databaseshutdowntakesafewminutes.rmdstartwillfailwhile

shutdownisinprogress.

SmartViewMonitor:Managementstopped FireWall-1:UserCheckserverisnotrunning VPN-1/FW-1stopped

SVN Foundation:cpdstopped

Multiportaldaemon:mpdaemonstopped

SVN Foundation:cpWatchDogstopped

SVN Foundation:StoppingPostgreSQLDatabase

SVN Foundationstopped

Importingfiles...

Theimportoperationcompletedsuccessfully.

DoyouwishtostartCheckPointservices?(y/n) [y]?#成功恢复，启动 CheckPoint服务

[Expert@smc2]#

==================================================================

SmartCenter恢复注意事项

如果将备份文件恢复到新的SmartCenter，需保持新SmartCenter和原SmartCenter的主 机名和IP地址一致，因在分布式布署模式下CheckPoint的License绑定SmartCenter的IP地 址，若新SmartCenter 的IP不一样，将无法登录，会提示没有可用的license

恢复过程将覆盖新SmartCenter的管理帐户和GUI，因此恢复后，登录新SmartCenter 需 使用原SmartCenter的用户名密码，

恢复后的SmartCenter不需要重建防火墙的SIC，可以直接管理防火墙，建议执行TestSIC Status，确保SmartCenter与防火墙的连通性

 

转载于:https://blog.51cto.com/ydnetsec/1841329