I don't see why Nokia would be saying that they "won't condone it".
There haven't been any changes to the actual operation of the
protocol between 3.7 and 3.9. Some changes to the way you configure
it, yes, but not to the way it actually works. You will still have a
master sending out multicasts, and your secondary will listen to
those and interpret it correctly. The VRRP packets don't contain
anything about the IPSO version in them.
I haven't done it specifically with 3.7->3.9, but I have done it many
times with other IPSO variants.
Ask your Nokia support how you are supposed to upgrade a cluster then?
If you are changing Check Point versions (not sure, I think you can
run R55HFA16 on 3.9 now), then you will run into problems
synchronising Check Point connections, which could cause you some
disruption. If you're keeping R55, you will be able to synchronise
your tables when installing the new 1220s.
If you're still unsure about it, then since you have two 1220s, why
not try testing it out on them?
- Lindsay
On 5 Dec 2005, at 20:07, Tony Montesano wrote:
I have an existing VRRP HA with 2 IP530 boxes. (IPSO 3.7.1 and
Chkpt R55
HFA16)
I am planning on upgrading to IP1220 boxes. Has anyone been
successful in
getting VRRP to Sync between and IPSP 3.7.1 and 3.9 box? (Nokia won't
condone it !)
To really minimize any impact this time of the year, I would like
to be
able to just swap out one of the ip530 HA pairs with a new IP1220
and keep
the
existing VRRP etc. in place.
Thanks,
Tony
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
