CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Installing And Upgrading
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2006-04-24
Member
 
Join Date: 2006-01-04
Location: The Netherlands
Posts: 32
Rep Power: 0
mmoret has an average reputation (10+)
Default Upgrading Checkpoint ClusterXL NGAI R55 -> NGX R60 on Solaris 9

Hi,

Here my two cents on this upgrade.

I followed the zero downtime procedure from page 100 in the chapter 6 from the upgrade guide.
After upgrading all but the active host, I performed a cphastop on the active member. Now instead of processing traffic on the new node, all traffic stopped.
Even installing a new policy did not help.

So, turned on the R55 member and did a rollback on the other node, my cluster was restored.

Yesterday I could have some downtime an upgraded both nodes right after eachother, this worked great. We only had a downtime of about 6 minutes. After three hours of testing and looking at the SmartviewTracker. I also installed HFA03 and tested the switching (we use HA new mode). My cluster works great now!

Conclusion: Zero downtime upgrade does not work from R55 to NGX R60.
I also contacted support, they said it should work, but couldn't find anything in our environment.

Hope this helps anyone.

Regards
Martijn
Reply With Quote
  #2 (permalink)  
Old 2006-08-23
Junior Member
 
Join Date: 2006-08-16
Posts: 4
Rep Power: 0
mirage131 has an average reputation (10+)
Default Re: Upgrading Checkpoint ClusterXL NGAI R55 -> NGX R60 on Solaris 9

Thanks for the post..I'm upgrading this weekend from R55 to NGX 61 & was thinking of doing the zero downtime..I guess not
Reply With Quote
  #3 (permalink)  
Old 2006-09-07
Member
 
Join Date: 2005-09-04
Location: Perth
Posts: 40
Rep Power: 0
seanmac1904 has an average reputation (10+)
Default Re: Upgrading Checkpoint ClusterXL NGAI R55 -> NGX R60 on Solaris 9

zero downtime worked fine for me.
I went from from R55 - > R60 on Solaris 9
I am using multicast load sharing not HA
dont know if that makes a difference
I found I needed HFA03 on my smartcenter before I could push policies to my R55 modules
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 12:01.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0