CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA or CCSE One-Week Certification Training Courses with CPUG in Beautiful San Francisco!
    R70 CCSA Courses Starting (2010) 6/7, 7/12, 8/9, 10/11, 11/8, 12/6.  R70 CCSE Courses Starting (2010) 8/16.
2. CPUG CON 2010 EUROPE, the User Conference in Switzerland, September 20th-22nd, 2010!
3. Join Our CPUG Groups On LinkedIn and Facebook.  See Our Channel on YouTube.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Management High Availability
Register Projects FAQ Members List Social Groups Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Search this Thread Display Modes
  #1 (permalink)  
Old 2008-11-03
Junior Member
 
Join Date: 2007-03-14
Posts: 2
Rep Power: 0
jaymis45 has an average reputation (10+)
Default HA Sync Issues since upgrade to R65

I performed an upgrade of the windows 2003 management servers from R60A to R65. I initially upgraded the secondary first after stopping HA. Then went and upgraded primary. The sendary was fine however with the primary.

There was a slight issue in that I could not login and the primary complained that I wasn't defined as a gui client. Because of that I promoted the secondary and rebuild the primary again using export_upgrade copy take prior to upgrade. This then allowed me to login fine but unfortunately both server became active/active. I demoted the secondary back to standby and then tried to sync the servers manually.

I am now getting the following error :-

Failed to synchronize
Reason : Failed to update shared licenses

Do you know how I can resolve this please ?

Would it be easier if i re-nstalled the secondary again and re-synced servers or would I get the same error ?

Im looking for a quick solution as this has been on-going for 3 weeks !

Last edited by jaymis45; 2008-11-03 at 09:10.
Reply With Quote
  #2 (permalink)  
Old 2008-11-04
Senior Member
 
Join Date: 2006-03-08
Posts: 222
Rep Power: 5
varera has an average reputation (10+)
Default Re: HA Sync Issues since upgrade to R65

if primary MGMT IP address is changed, you will have to re-issue central licenses used for those modules with a new IP.

if it is the same IP, try to detach and reattach the licenses again.

if this does not help, fwm debug is advised.
__________________
-------------
Sincerely,
Valeri Loukine
CCMA-0019
Reply With Quote
  #3 (permalink)  
Old 2008-11-04
Junior Member
 
Join Date: 2007-05-04
Posts: 4
Rep Power: 0
JeffP has an average reputation (10+)
Default Re: HA Sync Issues since upgrade to R65

I think the fastest resolution is build the secondary from scratch and let it replicate from the primary. You would of been fine where you are if you had not of done the upgrade_import to your primary after promoting the other. If that doesn't work you may have to get into some ugly dbedit stuff as it may be in a confused state as to what ip is primary and what is secondary.

Before you try to sync that secondary I'd remove all references to it from Smart Dashboard to cleanup as much of the database as possible.
Reply With Quote
  #4 (permalink)  
Old 2008-12-01
Member
 
Join Date: 2006-04-07
Posts: 32
Rep Power: 0
vadi_ag has an average reputation (10+)
Default Re: HA Sync Issues since upgrade to R65

Hi ,
correct me if i am wrong as per checkpoint first primary needs to be upgraded because then your secondary will become primary in case if you encounter any issues then you have this primary to work on , once the upgradation is complete and all the tests have been performed then you start the upgradation of the secondary ( which is primary now) and as you have completed this i suggest you to start the secondary from scratch.
__________________
Regards
Vadiraj
Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 18:38.


Powered by vBulletin® Version 3.8.5
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.5.1