I had this issue too during my implementation. I read somewhere that different HFA versions don't sync.
Christian Chiaverini CCSE -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Joachim Altenhein Sent: Wednesday, April 19, 2006 10:27 AM To: [email protected] Subject: [FW-1] How to do a NGX Full Connectivity Upgrade on IPSO VRRP-Cluster Hello, has anyone successfully installed a NGX-HFA on a Nokia IPSO VRRP-Cluster with full connectivity? I tried to do a fcu for the update from R60 to R60 HFA_02 using the following sequence of commands: 1.) Installed HFA_02 on the backup system and rebooted the system: State-sync was "ready" 2.) On the backup system i issued a fw fcu <primary IP> It reported a successful full-sync and the active Clusternode stopped processing traffic (ups!). 3.) I changed the VRRP-priority so that the backup system got the higher priority, still no traffic was processed. 4.) I installed the HFA_02 (which issues a cpstop) on the other node, still no traffic 5.) The cluster started to work again after the reboot of the second cluster node. So the cluster was down for several minutes which should not happen again. Regards, Achim ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= -- No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.1.385 / Virus Database: 268.4.4/318 - Release Date: 4/18/2006 ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
