Support Center > Search Results > SecureKnowledge Details
Items to review after IPSO to Gaia upgrade or configuration migration Technical Level
Solution

After an upgrade/migration from IPSO OS to Gaia OS, some steps may be needed on the new Gaia-system:

  1. The new Gaia-machine will have the 'admin' password from the previous IPSO configuration. For systems where the configuration was migrated from a different IPSO-based IP Series appliance, if you want to use the password, which was configured on the Gaia installation prior to upgrade, you must change the password back.

  2. When the 'admin' user logs into the new Gaia machine, the account will automatically start in the "Expert" mode, using the Csh shell (this is the IPSO OS admin's default shell). It is recommended to change the default shell to Clish for the Gaia 'admin' account by running the following commands:

    Clish> set user admin shell /etc/cli.sh

    Clish> save config

  3. If you were using SecureXL NAT Templates, be aware that in Gaia OS, SecureXL NAT Templates are disabled by default. To enable NAT Templates, refer to sk71200 (SecureXL NAT Templates).

  4. In Gaia OS, Proxy ARP is dealt with by the FireWall kernel, and different configuration is required. Refer to sk30197 (Configuring Proxy ARP for Manual NAT).

  5. For cluster VRRP configuration (refer to sk92061 (How to configure VRRP on Gaia)):

    1. Configure the cluster object:

      1. Open cluster object.

      2. Go to 'General Properties' pane - check the box 'ClusterXL'.

      3. Go to 'ClusterXL and VRRP' pane - select 'High Availability' - select 'VRRP'.

      4. Click on 'OK' to apply the changes.


    2. Define an explicit security rule to allow the cluster members to send VRRP and IGMP traffic to Destination IP address to 224.0.0.18. Use the predefined protocol "vrrp" and predefined protocol "igmp":

      NO. SOURCE DESTINATION VPN SERVICE ACTION TRACK INSTALL ON TIME
      1 VRRP Cluster Member_A

      VRRP Cluster Member_B
      Node object with IP address 224.0.0.18 Any ? vrrp
      ? igmp
      Accept None VRRP Cluster object Any

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment