Torkel Mathisen a écrit :
Hi,

I'm gonna upgrade our SmartCenter R62 to R65. I want to first uninstall R62 so 
that I get a fresh install of R65 without all the mess an upgrade makes.

I just wonder if this seems like a good way to do it:

1.      $FWDIR/bin/upgrade_tools/upgrade_export -n mgt
2.      umount /var/opt/CPsuite-R62/fw1/log
        (We have our logs on SAN and we don't want to loose them so that's why  
I gonna umount that mount first)
3.      cpstop
4.      pkgrm CPEdgecmp-R61
        pkgrm CPR55WCmp-R62
        pkgrm CPinfo-10
        pkgrm CPngcmp-R62
        pkgrm CPportal-R62
        pkgrm CPrt-R62
        pkgrm CPvsxngxcmp-R62
        pkgrm CPsuite-R62
        pkgrm CPsuite-R62
        (For some reason it always fails the first time in my lab. That's why
        I have put it twice here.)
There is a cpclean utility available from checkpoint.
I assume there should be a secureplatform/linux version that will perform the required tasks.
5.      reboot
6.      install R65 from scratch
you can indicate during installation that you wish to install from a backup config.
the file has to be named /var/tmp/CPbackup.tgz as far as I can remember.
7.      $FWDIR/bin/upgrade_tools/upgrade_import mgt.tgz
8.      mv /var/opt/CPsuite-R65/fw1/log /var/opt/CPsuite-R65/fw1/log.orig
9.      edit vfstab
10.     mount /var/opt/CPsuite-R65/fw1/log
11.     cpstart
12.     install HFA02

Does this sound ok or have I forgotten something?

Does anyone know for sure if the .def files will be imported when I do the 
upgrade_import of if it will keep the R65 .def files?
you can verify directly as the upgrade_export generate a tar.gz archive. but the def files should be imported either dring install or when you do the upgrade_import.
We've made some changes to them so I need to verify that.

I also have Edge gateways in my SmartCenter and need to know if these will 
still work when I upgrade. I remember there was a file I needed to edit some 
time back to get the correct version when I upgraded the Edge libs.

the libsw files have to be checked also.
silly question, but why don't you want to upgrade directly ?
Regards,
Torkel




Scanned by Check Point Total Security Gateway.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to