Hi, 1. Upgrade Node B, Reboot
2. Instead of cpstop, use "cphaprob -d failDevice -s problem register" on Node A, to make Node B the active cluster memeber. 3. Perform Tests, if successful 4. upgrade Node A 4. "cphaprob -d failDevice unregister" on Node A. Depending on option selected in Cluster object's, clusterxl tab, "maintain current active gateway", or "switch to higher priority gateway", Node B will stay active or Node A will become active. If you have the first option selected, and want Node A to be the active gateway again, perform the register/unregister on Node B. Christopher McGill On 3/12/07, Reinhard Stich <[EMAIL PROTECTED]> wrote:
At 12:10 12.03.2007, you wrote: >Hello, >-Is there a simple way to proceed some kind of clean "roll-back" from >(for example) secureplatform R60 HFA3 to R60. > >rpm -e CPsuite-R60-00 ? does it remove only HFA03? no. after the installation of any HFA it also creates an uninstall-script for the HFA in $FWDIR. >-During an upgrade to HFA03 on a R60 secureplatform, I would like to >check first, on the upgraded node, that applications going through the >FW are running correctly, before to upgrade the second node of the >cluster XL. > >I thought to proceed that way : >1 Upgrade the slave (node B). >2 Reboot the slave > >3 Proceed with cphastop on the Node A (primary still not upgraded) >=> the active node is now Node B. > >Check the applications > >4 And upgrade node A. > >Do you have a better way to do this ? >The question behind that is also, Is it a problem to have two nodes with >different HFA version in the same cluster ? check the release-notes for details about upgrading. you can have 2 R60 nodes with different HFA-version in a cluster - this is supported for an upgrade - without loosing connections. br reinhard >Thank you for your help. > > > >================================================= >To set vacation, Out-Of-Office, or away messages, >send an email to [EMAIL PROTECTED] >in the BODY of the email add: >set fw-1-mailinglist nomail >================================================= >To unsubscribe from this mailing list, >please see the instructions at >http://www.checkpoint.com/services/mailing.html >================================================= >If you have any questions on how to change your >subscription options, email >[EMAIL PROTECTED] >================================================= -- Reinhard Stich [EMAIL PROTECTED] Internet Security AG, 1150 Wien, Johnstrasse 29 Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333 ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
