Upgrading Nokia VRRP cluster

[Daveuk]

Hi all,
Just wanted to know if there are any good documents anywhere for the process in upgrading a HA Nokia VRRP pair of Checkpoint firewalls. They are currently R54 and want to take them to NGX. It's the actual order of steps that I'm after, I've just upgraded a development pair from NGX to NGX HFA03 by

1) Taking the backup firewall out of cluster in NGX.
2) Then applying the hotfix (upgrade) to it.
3) Taking the master out of cluster in NGX.
4) Adding the upgraded backup back into the NGX cluster.
5) Upgrade the master
6) Add it back into NGX cluster

Everything seemed to go fine but its hard to tell as these boxes don't have any real traffic on them. I'm just concerned by the creation and deletion of all the VPN objects certification. There are no VPN's as such hanging off the development boxes, so don't know if this method would affect the VPN's on the real firewalls or if there is a better process. Tried all the usual methods for finding documentation but with no real luck so far.
Thanks in advance,
Dave

[Lackie]

What you have done will work fine. It should be able to pick up the VPN's after the upgrade fine.