I had the same issue as well during my first attempt - the important
thing is: DO NOT CHANGE VRRP priorities and switch manually to backup node
you have to switch to the backup node by running cpstop on the active
one, then upgrade this the node
after the reboot it will become active again - no downtime the sync
between different HFA works because of the fcu command
Alex
Jerry Eblin schrieb:
Achim,
Same issues here as well. Following the instructions step by step and
the cluster went down for roughly 3-4 minutes when it shouldn't have.
Needless to say we were not happy with this. Just wanted to let you know
you are not alone with this issue.
Jerry
Joachim Altenhein
<Joachim.Altenhei
[EMAIL PROTECTED]> To
Sent by: Mailing [EMAIL PROTECTED]
list for INT.COM
discussion of cc
Firewall-1
<FW-1-MAILINGLIST Subject
@AMADEUS.US.CHECK [FW-1] How to do a NGX Full
POINT.COM> Connectivity Upgrade on IPSO
VRRP-Cluster
04/19/2006 10:27
AM
Please respond to
Mailing list for
discussion of
Firewall-1
<FW-1-MAILINGLIST
@AMADEUS.US.CHECK
POINT.COM>
Hello,
has anyone successfully installed a NGX-HFA on a Nokia IPSO
VRRP-Cluster with full connectivity?
I tried to do a fcu for the update from R60 to R60 HFA_02 using the
following sequence of commands:
1.) Installed HFA_02 on the backup system and rebooted the system:
State-sync was "ready"
2.) On the backup system i issued a fw fcu <primary IP>
It reported a successful full-sync and the active Clusternode
stopped processing traffic (ups!).
3.) I changed the VRRP-priority so that the backup system got the
higher priority, still no traffic was processed.
4.) I installed the HFA_02 (which issues a cpstop) on the other node,
still no traffic
5.) The cluster started to work again after the reboot of the second
cluster node.
So the cluster was down for several minutes which should not happen
again.
Regards,
Achim
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
