Check Point has always said having exactly the same platform on both systems of a cluster is a MUST, therefore even when I have no documentation or first hand experience with something like you are planning, I wouldn't risk it.
Also is possible that if you ask Check Point support about this, they will come up with the requirement mentioned above and will tell you it is not officially supported, which is reason enough for me to never put something like that in production. Now, given the fact one of the systems forcibly requires kernel 2.6, why not just reinstall the 2.4 machine with 2.6 and that way you have them both on the exact same platform and avoid taking risks. I know its your production firewall module, but you could replace it with the lab machine (already with 2.6 kernel) while reinstalling it with SPLAT 2.6 and the downtime should be very short. Again, this is just my personal opinion without having experience mixing 2.6 and 2.4 kernels on a cluster and thinking on the best way to avoid issues or conflicts. Regards On Fri, May 16, 2008 at 3:23 PM, Crist Clark <[EMAIL PROTECTED]> wrote: > We are looking at taking an existing single-string firewall, > and making it a cluster with ClusterXL. The existing firewall > is running good ol' SecurePlatform R65 HFA_02. We have on hand > a machine that is currently used in the lab to test network > changes before they go operational. However, the test machine > is not supported by the old 2.4 kernel SPlat. It's running > the "new" 2.6 kernel SPlat. > > Now, both machines are the same arch (AMD Opteron CPUs) and > are both running R65 HFA_02. I'm about, oh, 90% sure that > running them together as a cluster would be OK, but it'd be > great if someone could verify that they'd play well together > in a cluster, that mixing the 2.4 kernel and 2.6 kernel SPlats > in ClusterXL is not a Bad Thing. > > A co-worker brought up a really good point too. If the next HFA > for the 2.4 kernel comes out a few days before/after the 2.6 > version does, not a big deal. But are there some other issues > with future support that I'm not considering? > > For details the 2.4 kernel is a Sun Fire X2200 M2 and the 2.6 > kernel is a Sun Fire X4100 M2. The sad story is we originally > bought the X4100 M2 for the operational firewall only to learn > that the X4100, which Sun doesn't sell anymore, is supported > by the 2.4 SPlat, but not the X4100 M2. So we got a X2200 M2. > But then just weeks after the X2200 M2 went operational, Check > Point came out with the 2.6 kernel SPlat that supports the > X4100 M2. It'd be nice to use the X4100 M2 system, which was > a sweet but $$$ lab machine, for what we originally purchased > it for, an operational firewall. > > B¼information contained in this e-mail message is confidential, intended > only for the use of the individual or entity named above. If the reader > of this e-mail is not the intended recipient, or the employee or agent > responsible to deliver it to the intended recipient, you are hereby > notified that any review, dissemination, distribution or copying of this > communication is strictly prohibited. If you have received this e-mail > in error, please contact [EMAIL PROTECTED] > > Scanned by Check Point Total Security Gateway. > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > -- Sergio Alvarez (506)8301342 Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
