I had this issue too during my implementation.
I read somewhere that different HFA versions don't sync.
Christian Chiaverini
CCSE
-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM] On Behalf Of Joachim
Altenhein
Sent: Wednesday, April 19, 2006 10:27 AM
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: [FW-1] How to do a NGX Full Connectivity Upgrade on IPSO
VRRP-Cluster
Hello,
has anyone successfully installed a NGX-HFA on a Nokia IPSO VRRP-Cluster
with full connectivity?
I tried to do a fcu for the update from R60 to R60 HFA_02 using the
following sequence of commands:
1.) Installed HFA_02 on the backup system and rebooted the system:
State-sync was "ready"
2.) On the backup system i issued a fw fcu <primary IP>
It reported a successful full-sync and the active Clusternode stopped
processing traffic (ups!).
3.) I changed the VRRP-priority so that the backup system got the higher
priority, still no traffic was processed.
4.) I installed the HFA_02 (which issues a cpstop) on the other node, still
no traffic
5.) The cluster started to work again after the reboot of the second cluster
node.
So the cluster was down for several minutes which should not happen again.
Regards,
Achim
=================================================
To set vacation, Out-Of-Office, or away messages, send an email to
LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
--
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.1.385 / Virus Database: 268.4.4/318 - Release Date: 4/18/2006
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
