View Single Post
  #1 (permalink)  
Old 2008-04-19
onurbi onurbi is offline
Junior Member
 
Join Date: 2006-03-06
Posts: 3
Rep Power: 0
onurbi has an average reputation (10+)
Default Sure Steps from R61 to R65 with revert possibility

I read all relevant Threads in the "Installing and upgrading" forum and the "NGX R65 Complete Upgrade Guide".
It's the first time a will make a upgrade, therefore I plan to have good ways to revert to the old configuration.
I would appreciate a check of my steps to do the upgrade.

Given the following Installation:

Management and Smartcenter Server is a Win2K Server
The Enforcement Module runs on a Nokia IP350
Both are R61

The steps are:

- running upgrade_export on the old Win2K Server
- Installing "using Imported Configuration" and the Smart Center R65 on the new Win2k3 Server with an alternate IP-Adress
- Choosing a 15 day Evaluation Lizense, because of the alternate IP-Adress assuming that the IP-Address of the management Station has to fit to the lizense as well.
- Transferring the Backupfile to the new Win2k3 Server
- Running upgrade_import on the new Win2k3 Server
- This should restore the SIC as well. If not, resetting the SIC and establishing a new one (at first running cpconfig on the Nokia).
- Now both Management Servers should be able to communicate with the Nokia
- When this not worked I still have the old mangement server!
- Disconnecting the old Win2K Server
- Change the IP-Adress from the Win2k3 Server to the one the old one had.
- Installing the Check Point Lizense on the new Win2k3 Server
- Installing the rule set from the new Win2K3 Server for testing Purposes.
- Switching the secondary role to primary (is this possible and/or nessecary?)
- Create a configration Backup with Voyager on the Nokia with and without the Check Point option.
- Disconnect all Ethernet Ports from the Nokia except for the Management Port.
- Reimaging the Nokia to IPSO 4.2
- Restore the Voyager Backup without the Check Point option
- Reconnect the internal Ethernet ports except the one for the Internet one and make a connectivty test to several Nodes on all internal Ports.
- Install and activate the R65 package with all hotfixes
- Restore the Voyager Backup with the Check Point option
- Change version on FW-object to R65 in dashboard
- Establish a SIC for the Management communication
- Installing the policy again from the new Win2K3 Server
- Reconnect the ethernet Internet connection

I am unsure of the following point:

- There are no Check Point CDs available to have access to the upgrade_export and upgrade_import Tools. I need this tools before I start the Install process. How can I get this tools?
Searching fot upgrade tools I only found an "upgrade checker" for R65.

Regards,

Onurbi
Reply With Quote