How to Move a Secure Access Controller to a Different Cluster

To migrate a Secure Access Controller with assigned services to a different cluster, copy the configuration from the old cluster and re-configure the Secure Access Controller and Secure Connector settings in the new cluster according to your networking requirements. When the new Secure Access Controller is in place and running, remove the old management and data networks and delete the old Access Controller.

Before You Begin

Verify that the cluster you are migrating to supports the Secure Access Controller model.

Step 1. Block Configuration Updates

• Log into the Control Center.
• Go to CONTROL > Configuration Updates.
• Right-click on the Secure Access Controller and click Block Update.

Step 2. Copy the Secure Access Controller to the New Cluster

1. In the Control Center, click the CONFIGURATION tab.
2. In the configuration tree, navigate to the range and cluster the Secure Access Controller resides in.
3. Expand Boxes, right-click the Secure Access Controller you want to move, and select Copy Box.
4. Select the new cluster, and enter a new name for the Secure Access Controller.
   
5. Click OK.
6. Click Send Changes and Activate.

The Secure Access Controller is now copied to the new cluster and can be configured.

Step 3. Configure Networks for the Secure Access Controller

• Add the management and data networks that should be used by the new Access Controller and the Secure Connectors assigned to it. Create or adjust network objects according to your requirements.
• Enable Secure Connector Support for the cluster. For more information, see Infrastructure Set-Up.

Step 4. Configure Secure Connectors

• Add Secure Connectors to the Access Controller on the new cluster, using Secure Connector configuration templates. 

For more information, see Secure Connector Setup and Configuration.

Step 5. Remove the old Secure Access Controller

As soon as the new Secure Access Controller is up and running, you can delete the old box. 

1. In the Control Center, navigate to the old Secure Access Controller.
2. Right-click the Secure Access Controller and select Lock.
3. Right click the Secure Access Controller and select Remove Box.
4. Click OK.
5. Click Send Changes and Activate.

To delete the networks used by the old Access Controller:

1. Log into the Control Center.
2. Go to Multi-Range > Global Settings > Secure Connector Management Networks.
3. Click Lock.
4. Select the old network you wish to delete.
5. Click Delete Net.
   
6. Click OK. 
7. Click Send Changes and Activate.

Step 6. Unblock Configuration Updates

1. Go to CONTROL > Configuration Updates.
2. Right-click on the firewall and click Unblock Update.