R55 to R62 cluster firewall upgrade

[mc_rockz]

Guys need your inputs,

I already done my readings about the upgrade procedures.. i have time for downtimes so i for the individual firewall approach upgrade.

Current Setup:
1 - Smart Center Server NG R55 (Win2k)
1 - Pair Nokia IP530 Firewall, 512MB running Load sharing.
IPSO = 3.7.1
CP = R55
Upgrade to: CP NGX R62 using IPSO 4.1 build 28 or IPSO 4.2 build 42

My Procedure;
smartcenter:
1. Upgrade license on the smart center
2. Software upgrade on smart center to R62.
3. Test SIC Status, Push Policy.

Firewall: Individual firewall approach.
1. pullout 1st cluster firewall and do upgrade while 2nd cluster firewall is running.
2. After the upgrade of 1st cluster firewall, shutdown first the 2nd cluster firewall and insert back the 1st cluster firewall w new software installed.
3. Test SIC status bet smartcenter and 1st cluster firewall. Update the Firewall version at Cluster properties.
4. Clear the box On Gateway clusters, "Install on all members, if it fails do not install at all" before pushing the policy to the firewall this will install the policy to the 1st cluster firewall but not on 2nd cluster firewall since it is shutdown.
4. Upgrade the 2nd cluster firewall.
5. After the upgrade of the 2nd cluster firewall, shutdown again the 1st cluster firewall to perform verification and testing only on the 2nd cluster firewall.
6.Test SIC Status bet smartcenter and 2nd cluster firewall.Update the Firewall version at Cluster properties
7. Clear the box On Gateway clusters, "Install on all members, if it fails do not install at all" before pushing the policy to the firewall this will install the policy to the 2nd cluster firewall but not on 1st cluster firewall since it is shutdown.
8. If everythings ok. Power on the 1st cluster firewall while 2nd cluster is running to start the cluster setup.
9. Test the cluster setup.

Question: is there a problem i upgrade first the cluster member and not the cluster master?

Appreciate your comment.

Regards,
mc_rockz

[mc_rockz]

Hi guys,

My Firewall Upgrade is Done and it went very smooth.. thanks to all you guys especially RayPesek and mcnallym for all the comments and advice.


Regards,
Marlon