Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[Archive] How Do I Remove IDP mgt-svr Software (RPM) From an IDP That Serves as an mgt-svr/Sensor?



Article ID: KB6005 KB Last Updated: 04 Jun 2010Version: 6.0

How Do I Remove IDP mgt-svr Software (RPM) From an IDP That Serves as an mgt-svr/Sensor?


Symptoms & Errors:

  • Need to move mgmt server from sensor to other platform
  • Try to avoid modifing idp.cfg

note: Without advanced knowledge of the IDP configuration file, hand editing of idp.cfg is not recommended.

To remove the 3.0 IDP mgt-svr software (RPM) from an IDP that serves as an mgt-svr/sensor, perform the following steps:

Connect to the IDP sensor Command Line Interface (CLI).

 Navigate to: /usr/idp/mgt-svr/bin

 Enter ./ stop; press ENTER.

 Enter rpm -qa | grep idp; press ENTER.

 Navigate to: idpMgt**

 Navigate to: /usr/idp/mgt-svr/

 Enter rpm -e idpMgtSvr-3.0-62709; press ENTER.

note:If you have version 3.0r1 installed, the filename is 3.0-62709.  If you have version 3.0r2 installed, the filename is 3.0-68246.

note:Installing the mgt-svr on the sensor platform is not recommended, as it can over-tax the CPU.

The necessary mgt-svr files have now been removed from the management station. If you do not remove the mgt-svr RPM, the sensor will still recognize a locally installed mgt-svr. The Appliance Configuration Manager (ACM) will act on this and will not give you the option to enter the new IP address of the mgt-svr stand-alone management station. Once the data is erased from the device, it cannot be recovered.

note:If you are using an IDP 2.0 combination management station for the sensor and mgt-svr, please continue to Step 8.

 Install the mgt-svr software on the new stand-alone Linux or Solaris mgt-svr.

 Use the ACM to configure the sensor and save the new one-time password and IP address of the new stand-alone mgt-svr.

note:Verify that communication can flow freely between the necessary mgt-svr and sensor ports.

 Go to the UI and create the sensor object. For more information, go to How Do I Create a New Sensor Object in IDP? The new sensor object builds the encrypted tunnel for the traffic logs to pass between mgt-svr and sensor.


Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search