Achim,

      Same issues here as well. Following the instructions step by step and
the cluster went down for roughly 3-4 minutes when it shouldn't have.
Needless to say we were not happy with this. Just wanted to let you know
you are not alone with this issue.

Jerry



                                                                           
             Joachim Altenhein                                             
             <Joachim.Altenhei                                             
             [EMAIL PROTECTED]>                                               
To 
             Sent by: Mailing          [EMAIL PROTECTED] 
             list for                  INT.COM                             
             discussion of                                              cc 
             Firewall-1                                                    
             <FW-1-MAILINGLIST                                     Subject 
             @AMADEUS.US.CHECK         [FW-1] How to do a NGX Full         
             POINT.COM>                Connectivity Upgrade on IPSO        
                                       VRRP-Cluster                        
                                                                           
             04/19/2006 10:27                                              
             AM                                                            
                                                                           
                                                                           
             Please respond to                                             
             Mailing list for                                              
               discussion of                                               
                Firewall-1                                                 
             <FW-1-MAILINGLIST                                             
             @AMADEUS.US.CHECK                                             
                POINT.COM>                                                 
                                                                           
                                                                           




Hello,

has anyone successfully installed a NGX-HFA on a Nokia IPSO
VRRP-Cluster with full connectivity?

I tried to do a fcu for the update from R60 to R60 HFA_02 using the
following sequence of commands:

1.) Installed HFA_02 on the backup system and rebooted the system:
State-sync was "ready"
2.) On the backup system i issued a fw fcu <primary IP>
     It reported a successful full-sync and the active Clusternode
stopped processing traffic (ups!).
3.) I changed the VRRP-priority so that the backup system got the
higher priority, still no traffic was processed.
4.) I installed the HFA_02 (which issues a cpstop) on the other node,
still no traffic
5.) The cluster started to work again after the reboot of the second
cluster node.

So the cluster was down for several minutes which should not happen
again.

Regards,

  Achim

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to