> Source: [sk40993](https://support.checkpoint.com/results/sk/sk40993)

# sk40993 - How to change the IP Address of a Security Management Server?

| Property | Value |
|----------|-------|
| Solution ID | sk40993 |
| Date Created | 2009-04-19 |
| Last Modified | 2026-08-02 |
| Technical Level | General |
| Products | Security Management Server |
| Versions | R82.10, R82, R81.20, R81.10 (EOS), R81 (EOS) |
| Platform | Smart-1 |

## Solution

This article describes how to change the IPv4 address of a Check Point Security Management Server that runs Gaia OS.

**Important** - Before you change the IP address of the Security Management Server, see results/sk/sk103356" target="_blank" rel="noopener"\>sk103356 - How to renew SIC after changing IP Address of Security Management Server.

**Applies to:** Security Management Server on Gaia OS (Intel/PC, Smart-1), versions R81.20, R82, and R82.10.

**Prerequisites:**

* Schedule a maintenance window. Check Point services stop during this procedure.
* You have access to the Check Point User Center to update the licenses.
* You have console access. If the server has only one interface, you must connect through the serial console.
* You have an external, secure location to store the backup files.

**Procedure:**

1. Prepare the new licenses:
   1. Log in to your account in the Check Point User Center.
   2. Update the licenses for the new IP address of the Security Management Server.
   3. Download these licenses.
2. Back up the Security Management Server:
   1. Create a Gaia backup or a Gaia snapshot of the Security Management Server.
   2. See the Gaia Operating System Administration Guide for your version.
3. Export the management database:
   1. Connect to the command line on the Security Management Server.
   2. Log in to the Expert mode.
   3. Run: `cd $FWDIR/scripts/`
   4. Run: `./migrate_server export -v <VERSION> /<Full Path>/<Name of Exported File>`
   5. See the CLI Reference Guide for your version.
4. Move the backup files off the server:
   1. Copy the OS backup and the management database export to a secure external location.
   2. Compare the MD5 hash values of the copied files to make sure they are not corrupted.
5. Update the Security Management Server object in SmartConsole:
   1. Connect with **SmartConsole** to the Security Management Server.
   2. Open the Security Management Server object.
   3. Change the object's current IP address to the new IP address.
   4. From the left tree, click **Network Management** and change the IP address on the interface to match. Otherwise, a conflict occurs.
   5. Click **OK**.
   6. Publish the session.
   7. Close all SmartConsole windows.
6. Stop the Check Point services:
   1. Connect to the command line on the Security Management Server.
   2. Run: `cpstop`

   **Note** - If CME is installed on the Security Management Server, and you have Cloud Firewall for NSX-T Security Gateways, you must also do the steps in [sk181234](https://support.checkpoint.com/results/sk/sk181234).
7. Change the IP address on the applicable interface in the operating system.  
   There are two different ways to make this change. **Do only one of them** : use **Option A** if you prefer a web interface, or **Option B** if you prefer the command line.  
   **Important** - If the Security Management Server has only one interface, you lose the network connection when the IP address changes. In this case, do this step through the serial console.  
   **Option A - Change the IP address in Gaia Portal**
   1. Connect with a web browser to the Gaia Portal on the current IP address of the Security Management Server.
   2. In the left navigation tree, go to **Network Management** \> **Network Interfaces**.
   3. In the **Interfaces** section, select the applicable interface and click **Edit**.
   4. Assign the new IP address.
   5. Click **OK**.

   **Option B - Change the IP address in Gaia Clish**
   1. Connect to the command line on the Security Management Server over SSH or over a console.
   2. Log in to Gaia Clish.
   3. Run: `set interface <Interface Name> ipv4-address <IPv4 Address> subnet-mask <Mask>`
   4. Run: `save config`
8. Install the license that contains the new IP address.
9. Start the Check Point services. Run: `cpstart`
10. Install the management database:
    1. Connect with **SmartConsole** to the Security Management Server on its new IP address.
    2. Click **Menu** \> **Install Database**.
    3. Select all servers.
    4. Click **Install**.

**Notes:**

* Because the host name of the Security Management Server does not change, SIC communication is not affected, as long as the routing is correct. SIC is based on certificates, not on IP addresses.
* To make sure there is connectivity between the Security Management Server and the managed Security Gateways, add a rule that allows the new IP address and install the policy on all managed Security Gateways.
* On your DNS server, map the host name of the Security Management Server to the new IP address.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content