So your saying upgrade the secondary to R71 and make prmary, that is shutdown the primary R65, then if all ok upgrade the other R65 and synch, and in return manage the R65 modules, so given all this i assume they have to be the same versions in order to synch and run as a HA pair? Thanks
On Mon, 05 Sep 2011 07:30 BST pkc mls wrote: >Le 04/09/2011 20:19, Peter Addy a écrit : >> looking to upgrade smart center managers running NGX R65 to R71.30 on Solaris >> platforms >> >> We haved primary and secondary servers both running R65 in HA mode and in >> synch >> >> question is, if i upgrade the secondary to NGX R71.30, wil this still remain >> in >> synch with the primary R65? >You can't have smartcenter running different versions synchronize with each >other. >> Can i then make the seondary the primary to manage the R65 firewall modules, >> and >> be able to make changes, push polices etc to the firewall R65 modules, then >> simply upgrade the secondary which was the primary to R71? >You can manage r65 modules with r71 smartcenter >> Do you see any issues in doing this ? >> >> Thanks >> >I recommend to reinstall the secondary as r71 primary and import the >configuration afterwards; >(make sure to export the config with r71 upgrade_export binaries). > >If r71 new primary works fine (ie everything is imported), you can shut down >the r65 primary and >manage r65 nodes with r71 primary. >keep the config for some days to make sure eevrything works fine (policy push, >logs, etc). >if you have any issue you can shutdown the r71 primary and restart the r65 >primary. >if everything is ok after some days you can reinstall the r65 primary as r71 >secondary and synchronize smartcenters. > >Scanned by Check Point Total Security Gateway. > >================================================= >To set vacation, Out-Of-Office, or away messages, >send an email to [email protected] >in the BODY of the email add: >set fw-1-mailinglist nomail >================================================= >To unsubscribe from this mailing list, >please see the instructions at >http://www.checkpoint.com/services/mailing.html >================================================= >If you have any questions on how to change your >subscription options, email >[email protected] >================================================= Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
