[j-nsp] Advice about migrating large scale Check Point to SRX

Pierre Lamy pierre at userid.org
Mon May 14 10:56:01 EDT 2012


Bonjour,

We will have dozens of SRX deployed this year. Currently we are using 
Provider-1 for the CP boxes, no standalone mgmt. The conversion piece is 
being handled by Juniper PS, I am more worried about the day to day 
workflow.

Pierre

On 14/05/2012 5:23 AM, pkc_mls wrote:
> Le 13/05/2012 10:22, Pierre Lamy a écrit :
>> Hello,
>>
>> For any folks who have done this sort of migration before, do you 
>> have any tips or advice about what to expect? I am especially 
>> interested in workflow and managing complexity when adding many, many 
>> changes a week.
>>
> Hi,
>
> Does checkpoint large scale mean provider 1 ?
>> We've been shown JACL (which we will surely leverage daily) and SPACE 
>> (not so sure about this, vs JACL mass management). I will also be 
>> writing some automation tools for the environment w/ NETCONF, such as 
>> automated remote backups and scheduled commits.
>>
> for the checkpoint export you can use odumper, but I'm not aware of 
> any free tool to convert the export
> to SRX format (shouldn't be that hard to write in perl and will 
> definitely save time).
>
> I did this for pix to srx conversion and this really saved a lot of 
> time. (but I didn't use juniper management like NMS or Space).
>
> How many SRX will you have ?
>> Pierre
>
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp


More information about the juniper-nsp mailing list